---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-17T03:48:30Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-17T03:48:30Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-17T03:48:30Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-17T03:48:32Z"
  name: system:openshift:openshift-monitoring-c6dwq
  resourceVersion: "8235"
  uid: 3a95313a-e853-4676-89d3-be7a0e672a61
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=337d593b-8243-4d95-82d5-0d4c10c48fa4
    authentication.kubernetes.io/node-name:
    - ip-10-0-142-108.ec2.internal
    authentication.kubernetes.io/node-uid:
    - f24eada1-543a-43da-b111-7e03ccd4c498
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6cd954b897-8ntgv
    authentication.kubernetes.io/pod-uid:
    - 2aeaab64-312e-4d9a-8f3f-97555d754e1a
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: c7b43e1f-14a7-4796-876c-7ce7544e2c9c
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-17T03:48:30Z"
    lastUpdateTime: "2026-09-17T03:48:30Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-c6dwq"
    reason: AutoApproved
    status: "True"
    type: Approved