---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-07T12:42:17Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: metrics-server
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-07T12:42:17Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-07T12:42:17Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-07T12:42:17Z"
  name: system:openshift:openshift-monitoring-2r5zf
  resourceVersion: "8450"
  uid: 76198e70-fbc0-4cef-a5d5-6acb0911b982
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=41f72511-8c2c-43b6-b330-beea082c2b70
    authentication.kubernetes.io/node-name:
    - ip-10-0-139-78.ec2.internal
    authentication.kubernetes.io/node-uid:
    - ddfe29d0-b3ab-4a32-916a-b1e7012b2e62
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6cdcc96965-6g9st
    authentication.kubernetes.io/pod-uid:
    - 810685be-a0c1-4a32-8f4c-d28e0ddd149d
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: c8969f8f-b81e-4897-8775-ce2b4232d227
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-07T12:42:17Z"
    lastUpdateTime: "2026-09-07T12:42:17Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-2r5zf"
    reason: AutoApproved
    status: "True"
    type: Approved