---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-24T14:26:26Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-24T14:26:26Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-24T14:26:26Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-24T14:26:44Z"
  name: system:openshift:openshift-monitoring-d67z7
  resourceVersion: "8223"
  uid: 146c2c0f-9101-4ec3-b6c6-8f2213e78467
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=47b4b763-31d6-4b1a-a4dd-3ea453db8240
    authentication.kubernetes.io/node-name:
    - ip-10-0-135-93.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 25311083-e421-4112-afcb-635309a1dbc6
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-548b489cb8-kschn
    authentication.kubernetes.io/pod-uid:
    - 6852cf8e-b13e-49e3-b9bb-383a5ea7e803
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: a14759bb-b6c1-48d5-8033-2a3fe60ee0ca
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-24T14:26:26Z"
    lastUpdateTime: "2026-07-24T14:26:26Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-d67z7"
    reason: AutoApproved
    status: "True"
    type: Approved