---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-20T19:27:07Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-20T19:27:07Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-20T19:27:07Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-20T19:27:07Z"
  name: system:openshift:openshift-monitoring-mlpxl
  resourceVersion: "9576"
  uid: 00ca8271-75b9-4610-9129-d066d934058d
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=682343ce-ce39-47c5-8d97-96810841b3b5
    authentication.kubernetes.io/node-name:
    - ip-10-0-143-187.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 491b008f-3a58-4385-92ca-b632286fff95
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-76cf8966f8-96ddc
    authentication.kubernetes.io/pod-uid:
    - 7891fd62-29a5-43c0-9dd8-f492b06b980f
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 3c641b9c-5e6b-469b-8050-2f8bbf4b41e9
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-20T19:27:07Z"
    lastUpdateTime: "2026-07-20T19:27:07Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-mlpxl"
    reason: AutoApproved
    status: "True"
    type: Approved