---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-28T12:52:21Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-28T12:52:21Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-28T12:52:21Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-28T12:52:21Z"
  name: system:openshift:openshift-monitoring-9x5tb
  resourceVersion: "8466"
  uid: fd4b35ff-dbe0-4021-8f99-66a7d39f55c6
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=719db5ef-92c3-4bda-af7b-66f7393e7967
    authentication.kubernetes.io/node-name:
    - ip-10-0-136-204.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 33ad12dd-4ca0-407a-bdac-08b012ac8ff2
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-548b489cb8-4vb57
    authentication.kubernetes.io/pod-uid:
    - 75391787-ee75-4954-af25-755dd1f434b4
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: ada32f71-b050-49c6-a9bc-5503b800f89e
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-28T12:52:21Z"
    lastUpdateTime: "2026-07-28T12:52:21Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-9x5tb"
    reason: AutoApproved
    status: "True"
    type: Approved