---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-11-02T17:39:45Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-11-02T17:39:45Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-11-02T17:39:45Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-11-02T17:39:45Z"
  name: csr-fb29d
  resourceVersion: "5931"
  uid: 4c13be1e-9301-410b-aa85-3ec612d27eb6
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=f6910c7e428cdb89dba31b271c621728b991101010cd257fdede1a8843bbb183
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-135-9.us-east-2.compute.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-11-02T17:39:45Z"
    lastUpdateTime: "2026-11-02T17:39:45Z"
    message: Auto-approved CSR "csr-fb29d"
    reason: AutoApproved
    status: "True"
    type: Approved