---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-05-28T15:10:09Z"
  generateName: system:openshift:openshift-monitoring-
  labels:
    metrics.openshift.io/csr.subject: prometheus
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-policy-controller
    operation: Update
    subresource: approval
    time: "2026-05-28T15:10:09Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-05-28T15:10:09Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:metrics.openshift.io/csr.subject: {}
    manager: operator
    operation: Update
    time: "2026-05-28T15:10:09Z"
  name: system:openshift:openshift-monitoring-lzztm
  resourceVersion: "8438"
  uid: 898f2ddd-2bf6-4c6e-b1a9-9eb136e9edca
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=0e3b316f-73b8-431c-8092-548cc43fb5ea
    authentication.kubernetes.io/node-name:
    - ip-10-0-140-141.ec2.internal
    authentication.kubernetes.io/node-uid:
    - a20462f6-d5d4-415b-b74a-b2903e5cc5a6
    authentication.kubernetes.io/pod-name:
    - cluster-monitoring-operator-6c75959455-7zpd4
    authentication.kubernetes.io/pod-uid:
    - b6714928-0dd7-4b82-b82c-9c83f3967f52
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-monitoring
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 286c4a90-6bb2-4ae0-a328-e4b0b0b2c670
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-05-28T15:10:09Z"
    lastUpdateTime: "2026-05-28T15:10:09Z"
    message: Auto-approved CSR "system:openshift:openshift-monitoring-lzztm"
    reason: AutoApproved
    status: "True"
    type: Approved