---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-05T19:46:09Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-05T19:46:09Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-05T19:46:09Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-05T19:46:09Z"
  name: system:openshift:openshift-monitoring-tc96w
  resourceVersion: "8052"
  uid: 7fc16c49-beb2-4b54-9580-0eafea3f639c
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=c977b576-eea8-4efa-90b9-a64beb2028bc
    authentication.kubernetes.io/node-name:
    - ip-10-0-142-208.ec2.internal
    authentication.kubernetes.io/node-uid:
    - a328a951-e090-417b-995c-5a9e2346c591
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6cdcc96965-wm7bd
    authentication.kubernetes.io/pod-uid:
    - cd029360-95f2-45c6-9648-1fe5fe757822
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: f043903c-bc24-42be-abb4-9b1e4b371997
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-05T19:46:09Z"
    lastUpdateTime: "2026-09-05T19:46:09Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-tc96w"
    reason: AutoApproved
    status: "True"
    type: Approved