---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-15T12:09:49Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-15T12:09:49Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-15T12:09:49Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-15T12:09:49Z"
  name: system:openshift:openshift-monitoring-rkzmc
  resourceVersion: "8245"
  uid: beab5036-d038-4e10-8f40-99d6cc723dab
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=f7bd5b24-7991-457b-875f-e770f7036060
    authentication.kubernetes.io/node-name:
    - ip-10-0-139-122.ec2.internal
    authentication.kubernetes.io/node-uid:
    - d1db1e1d-0c88-4c6c-b447-00d2bca6b76c
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-5f7f494dd4-4rgqh
    authentication.kubernetes.io/pod-uid:
    - cb25e4f7-4b2b-4b34-a913-4e022767261f
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 0c8707e7-d33a-460d-afab-dae2813f9bd3
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUpjaFVUOVFBSTF2WVNEam9MU0FtQ1V3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RTFNVEl3TkRRNVdoY05Namd3TnpFME1USXdORFE1V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU2RwYW5DUE1WZTI5Nk1WTE1tZUp1OApUd3duOUk1cHF3alZ4UFl3M3JTV1pHM2lzem4vYWRPY1BNTG1zMWV5NkZKZTlvcUEwY1FQOWtEZldZUmxtZjM3Cm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFMV2I0anZ6Yk4rQWF6U2phaWl0dW9VaDloYjl1TFpwY0FWMgpGbjlWNXZyY3Fpekl6Q3lIdEhmRTUvOGlyZUtlWkdOTjBFVTRHTXZWbXZZbk82WWM4K2d3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFLTlhKa1ZIa0Jpa012T2NHRHJGTEpCNFJtaXFHbDZhaFhhSkZ6SCt3RTdQdWtocjFmMFoKU1drT05vNW9kM1YrenJCV2dTSzdDVDNOY0I1cU9mNGxPSFNvMHZ6Q0oyZ3BiMUJYT1VCKzQwTTh5Z3NSZS9lNwpEbXc0aEp2eFo1REI4R0ZZeXR5QXVuRzhsN1NId3Uza1hROGtCY3ZCYTFKc3Fxb2JrNXhMdkM3ZDhLZy9tcHRMClZGYmt6anY3NlBnY3VSY3B5UWZlUlJScllQNHYwVDI2eGRwaDFnRWhudm5DZDVoRVRzdFlwYTh0d280N0RvVnAKNG9rTHZjUVQwekpSeHZzYno5QUNIcTBLOFRTanA4SDNDa2NiUFozVmkxT3hJZHA5bXkvZnMyREQvK2UyR0RrZwp6c212aVd5Mmk3SmNQMTdDRGlkQWwvUURtbkFBRk1iaW5wVT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-07-15T12:09:49Z"
    lastUpdateTime: "2026-07-15T12:09:49Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-rkzmc"
    reason: AutoApproved
    status: "True"
    type: Approved