---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-05-21T16:53:19Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: prometheus
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-05-21T16:53:19Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-05-21T16:53:19Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-05-21T16:53:19Z"
  name: system:openshift:openshift-monitoring-hzljf
  resourceVersion: "8401"
  uid: a3afbec6-c938-4198-811d-6af6046d2329
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=6aef73f2-5e1c-4110-a68f-edab4a92b3ee
    authentication.kubernetes.io/node-name:
    - ip-10-0-135-101.ec2.internal
    authentication.kubernetes.io/node-uid:
    - 93f1b50d-d9e9-4ee6-916a-6a4fe8edc690
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6c75959455-54zlq
    authentication.kubernetes.io/pod-uid:
    - 1b80bd91-e87c-4d96-86d8-34b1b4ac2b08
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 5c50a1ac-0da0-4c43-bf2d-986f2a29b903
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-05-21T16:53:19Z"
    lastUpdateTime: "2026-05-21T16:53:19Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-hzljf"
    reason: AutoApproved
    status: "True"
    type: Approved