---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-05-28T07:18:34Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: prometheus
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-05-28T07:18:34Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-05-28T07:18:34Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-05-28T07:18:34Z"
  name: system:openshift:openshift-monitoring-kcx7r
  resourceVersion: "8220"
  uid: 6a3f01f2-c9b7-440f-8fe0-0b0a591263fb
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=3ee191c2-382d-4876-8026-a7cfa3991e71
    authentication.kubernetes.io/node-name:
    - ip-10-0-130-201.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 3be8f41c-8c0a-4bb8-bdd5-935572fff267
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6c75959455-vpfps
    authentication.kubernetes.io/pod-uid:
    - 6dbc55b7-906d-4d5f-8a72-65500a7fd34b
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: ba010a22-e473-4759-9dab-db8f489640e8
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-05-28T07:18:34Z"
    lastUpdateTime: "2026-05-28T07:18:34Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-kcx7r"
    reason: AutoApproved
    status: "True"
    type: Approved