---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-14T11:29:17Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-07-14T11:29:17Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-14T11:29:17Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-07-14T11:29:17Z"
  name: system:openshift:openshift-monitoring-stdkh
  resourceVersion: "8328"
  uid: d11a4926-a1d6-44ec-8858-ffc8de60ed95
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=bd48322d-cdb7-461b-a813-567c7b2967ec
    authentication.kubernetes.io/node-name:
    - ip-10-0-132-52.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 2ce919d4-3521-4343-85f6-deecf0a52797
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-5f7f494dd4-bmkv9
    authentication.kubernetes.io/pod-uid:
    - 8d7dc9d9-7a2e-4aef-bd37-53d97c1682a3
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXpaWEoyWlhJd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBUld5Q2Y1OTdDNThFbHdDK0tHK0NZRVNxSnNGdGdzc2hXVDhaa1B3NTlUWS9ZS1NmTXAKMUZERy9SMWRYK0lVNjFIVlBYTThocHZScVVQYTB6SVFiZ3VOb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTFVLVGFxR0ZDM3pTS0UrLzIzM1czYzJKaXA2OEc5MW50d0ZMc2YzWWVYckFpRUF3R2ttM0VlQVRSZ2J2OWNNCjNaNllDLzNmbDduTHhJSE5oaDBjQUo0MnV3Yz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg==
  signerName: kubernetes.io/kube-apiserver-client
  uid: 7aa7d469-e4d9-4bdf-9bf5-2d113aa175bf
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-14T11:29:17Z"
    lastUpdateTime: "2026-07-14T11:29:17Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-stdkh"
    reason: AutoApproved
    status: "True"
    type: Approved