---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-06-02T13:38:02Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-06-02T13:38:02Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-06-02T13:38:02Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-06-02T13:38:02Z"
  name: system:openshift:openshift-monitoring-kfffn
  resourceVersion: "8281"
  uid: b56b40ea-e959-4601-9fe3-be30e32dc07b
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=21416855-a12c-4880-a580-57baa1e3e89d
    authentication.kubernetes.io/node-name:
    - ip-10-0-130-124.ec2.internal
    authentication.kubernetes.io/node-uid:
    - fff0f0f6-0523-4971-86f6-e1648df3eac3
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-69b6cbdb88-gnkt8
    authentication.kubernetes.io/pod-uid:
    - b81ad2a5-97a5-452d-beb1-12eb06143da5
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 97b4e2af-492d-4cc6-b655-34d8b70caadc
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0VENDQVoyZ0F3SUJBZ0lRRGdVWmpwcXYvNjNLV1JkWXpjQ2t5ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1ESXhNek16TURKYUZ3MHlPREEyTURFeE16TXpNREphTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsCmJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwdmNHVnVjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHRaWFJ5YVdOekxYTmwKY25abGNqQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJOSTBlNjZjUnZjK0xMTU82a0ZTdzh2NwpRT0U1dGR6dWxzT2VvLzRuUkozdmt5QzFVVStuNkNnR1BQRHd2bnhQVk9rMkJrcjR0SDZwT2NFRHZ1Vzh3a3lqCmdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01DTUF3R0ExVWQKRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWNqTmFJbmpvaW5nSWJ3eEQ1V0pvOFBpbmN5TTRmaTJ6aGhqNgphNlhhSCtoRFBpWHJ1ZWFhV2Q4MmpMa25INUM3VTYwbm5CWU56NXdXSkVJL1V2cndWekFOQmdrcWhraUc5dzBCCkFRc0ZBQU9DQVFFQW5jVWNFeUl6M0N6Q0U5ZWhvWFE0NkNhVzJ6YnlkN2VJQ280NlRONklyT1YzR2lmMmZPR0gKTVl3dDMvUzhMUzJ5YmZlWEQ2V3dJa0ZuTXJqd0ZSMzhwcFA3NlRpVndZam1QVmxna0dhU3I1OWhpRXZhUEJrMgpHRFJpdmtrRHJYeTR5S2RSbzc3VHpJK2IyKzBuMk9PemhOeWtKSHZhNlc1d3RVQURWUXM0TUNMcXA5Q0FBTTNwCm0xeG96ZXg3WDZIVk95Vm5vb0EzL2NmMy9jY0FlVWlNcDF1eTc4eDc2NitseUw3UmptVjFXRnVtaFB2cXpFNkoKUXpCVG5oMEJtbm9pQ3lpNGZRUjZVeWxEWTlvUEZrRGVzSHoxT3ZBSHBSWDZ2M0pYWHdJbEphb3FCREZNUWtiKwpRb3JLd3Z5TS9OdGZiS1IzY2IzUmNFVkNaem9Xa0NBM1d3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-06-02T13:38:02Z"
    lastUpdateTime: "2026-06-02T13:38:02Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-kfffn"
    reason: AutoApproved
    status: "True"
    type: Approved