---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-06-14T21:37:41Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: prometheus
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-06-14T21:37:41Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-06-14T21:37:41Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-06-14T21:37:41Z"
  name: system:openshift:openshift-monitoring-lbl67
  resourceVersion: "9448"
  uid: e77f21c9-c8d1-419b-83c9-93f2b74bf03b
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=dc136989-4079-44bd-94d7-46df3d09a3c9
    authentication.kubernetes.io/node-name:
    - ip-10-0-128-159.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 9587ecae-96fe-4a70-9b05-2a49502903a6
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-f9d7df769-n5tm8
    authentication.kubernetes.io/pod-uid:
    - 5419fc9c-4dab-4b61-895d-4b402a659438
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIK01JR21BZ0VBTUVReFFqQkFCZ05WQkFNVE9YTjVjM1JsYlRwelpYSjJhV05sWVdOamIzVnVkRHB2Y0dWdQpjMmhwWm5RdGJXOXVhWFJ2Y21sdVp6cHdjbTl0WlhSb1pYVnpMV3M0Y3pCWk1CTUdCeXFHU000OUFnRUdDQ3FHClNNNDlBd0VIQTBJQUJOaGl5UHRFYU9oSHVYK2FiazFTcDY4T2cyYXdBSWJkeCtidWd4cEdMZ1JMKytxRDFoVDcKQm1jbnBjTjRGRzhLVDBWNExPczVqeUgvYXVtSGxBYjFqRFNnQURBS0JnZ3Foa2pPUFFRREFnTkhBREJFQWlCcQp4TzlDa1A2MEQxbXgwUy9EZWk4YnZvM1dBYVVQR2NJSXg0SUltYmpXZUFJZ0JvR2pZS05uajZ2cG13Y2ZxOTh5Cm53N0pIbUtuajJjcWZ5WFA5dW8zUHZrPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K
  signerName: kubernetes.io/kube-apiserver-client
  uid: 9a832e6c-bca6-4e2f-9ec7-cc0ceadac87a
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-06-14T21:37:41Z"
    lastUpdateTime: "2026-06-14T21:37:41Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-lbl67"
    reason: AutoApproved
    status: "True"
    type: Approved