---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-05-29T02:00:47Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: prometheus
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-05-29T02:00:47Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-05-29T02:00:47Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-05-29T02:00:47Z"
  name: system:openshift:openshift-monitoring-hqk6g
  resourceVersion: "8484"
  uid: 60367377-026b-4502-bcba-067d36bfbc52
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=eb9de0ca-22d5-4706-919b-57bac7666de5
    authentication.kubernetes.io/node-name:
    - ip-10-0-141-250.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 990e59c7-fd61-42ca-912e-f5b82850542b
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6c75959455-tx59c
    authentication.kubernetes.io/pod-uid:
    - a041f7bf-9420-4d09-b7c3-6897933d87ea
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: a5198cc3-39bc-4c17-8789-4f4f82bd4ac0
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-05-29T02:00:47Z"
    lastUpdateTime: "2026-05-29T02:00:47Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-hqk6g"
    reason: AutoApproved
    status: "True"
    type: Approved