---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-17T17:35:23Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: prometheus
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-09-17T17:35:23Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-09-17T17:35:23Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-17T17:35:31Z"
  name: system:openshift:openshift-monitoring-4w48w
  resourceVersion: "7695"
  uid: e87d1f9f-c61d-4784-bd10-0fdef20bb4d3
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=a60de30d-e4e5-4019-8e70-4bf882f366ca
    authentication.kubernetes.io/node-name:
    - ip-10-0-128-248.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 9da60210-b033-4852-9fe6-623419925dd1
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-847b8bd8d7-kzc24
    authentication.kubernetes.io/pod-uid:
    - 939b0f33-4382-405b-ab91-17a162e03fbb
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: d3e117cf-a5ed-4bb8-a1ad-8814361c4617
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-17T17:35:23Z"
    lastUpdateTime: "2026-09-17T17:35:23Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-4w48w"
    reason: AutoApproved
    status: "True"
    type: Approved