---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-06T21:22:45Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-06T21:22:45Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-06T21:22:45Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-06T21:22:45Z"
  name: system:openshift:openshift-monitoring-nl5zc
  resourceVersion: "8317"
  uid: b2ca9d59-fc99-4a46-a7b3-7fa50f4f2ebf
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=c7939d4a-dcd1-409f-bf75-ec0be9fcbd6f
    authentication.kubernetes.io/node-name:
    - ip-10-0-133-11.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 8a920546-51e1-40d6-bdd5-93af25326e8b
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-64786d9cbb-mfdvq
    authentication.kubernetes.io/pod-uid:
    - 2729e991-d331-4162-b6ce-5b8130722c90
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: b9e4c76d-4f20-4b40-b520-9f2749204792
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-06T21:22:45Z"
    lastUpdateTime: "2026-07-06T21:22:45Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-nl5zc"
    reason: AutoApproved
    status: "True"
    type: Approved