---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-21T12:12:21Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-21T12:12:21Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-21T12:12:21Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-21T12:12:21Z"
  name: system:openshift:openshift-monitoring-85prz
  resourceVersion: "8340"
  uid: 10cabbeb-d0e8-47f5-8f43-f421622ed836
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=46cdb83e-dab2-4aa5-96ad-bcc38c40ef7d
    authentication.kubernetes.io/node-name:
    - ip-10-0-136-33.ec2.internal
    authentication.kubernetes.io/node-uid:
    - ad17f42e-2a80-483f-b642-bc2052aadc34
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-76cf8966f8-7l28l
    authentication.kubernetes.io/pod-uid:
    - 41a6c18f-f386-4739-8fa7-2acdfdf46223
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 5b1e5a8a-98e1-4d33-98f4-5e2ee7dbb05e
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-21T12:12:21Z"
    lastUpdateTime: "2026-07-21T12:12:21Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-85prz"
    reason: AutoApproved
    status: "True"
    type: Approved