---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-11-02T18:00:29Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-11-02T18:00:29Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-11-02T18:00:29Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-11-02T18:00:29Z"
  name: csr-tn8nv
  resourceVersion: "5442"
  uid: 6ff815f1-5a52-4d2a-ae26-d36d6a28dfbd
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=6179f68d14f2ac0508676d7d4cdde85243fd7778506285fd39c4775d140f6cc8
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-129-58.us-east-2.compute.internal
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUMwVENDQWJtZ0F3SUJBZ0lSQU1rakdNUzhDMmdETnRBc0lUSFV1b2N3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZeE1UQXlNVGMxTlRJNVdoY05Nall4TVRBek1UYzFOVEk1V2pCZk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVUl3UUFZRFZRUURFemx6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWprdE5UZ3VkWE10WldGemRDMHlMbU52YlhCMWRHVXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncQpoa2pPUFFNQkJ3TkNBQVR3VzE1eExRUWhzNlpNYjZUa2xtemwyYUlpTkFUZlRnd3VVMURBeGdFenJMRmgvNHQ2CnJ4OTkrOXJFeERuc0NVSVg0TFJwUFFnUm04WXNVdFQ2bEZmVW80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUgKZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQQpRTm54QVhCSTBpaW5McmZZenAvbFlFaytqNGVzSXRKM0hQSFRDNHhWWXNaaE9DY0lhRi95WHFzZVNWWHpuOHNsCjhVYVAwV09mbEVUUlV3d3VLazNYdFVjd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFIREhZS2g4ci9wNjl1V1UKVFRZNWRZNnBWSkozZEk2bVFkNitHMXVmWVkyQzM2Vjc0V0kzSWFhYy9nQUdNM0JTeE9zL0NuVWNGUXVwanNCbwpVeTJvK0FZTTFWbUZOc2tPWU1qSS9jSDE3bWQxaWJHalVYOUJFeEVOaVZXU09pWUhMRCtZaU9ENEpSd1dGU1dWCkF3dVQ4anprNCtuRmVNOUFudjBJWXdlVUlRMkVqSmdKRDI0QWFqSG5qd0VtRnJJVWFPWGNVNW9lNWtXOW8yVVIKek9xVXc2dWt3SCttUGh4R2NPa2p4a0x3U3BVeWdDSVRUdGQ5YVBwa2tFVTBnc00xZ1ZkRHc5UUQwWXI4SGxlawp3T2ZFQkdjM0dUSG9LN0FQZVFDNEtUaTY5TVlWN0FZdzZlR2hNSVdYZ2psVFRkdWk0TGZOVFlwTkJybnJqWG1sCkl5VGdVTE09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
  conditions:
  - lastTransitionTime: "2026-11-02T18:00:29Z"
    lastUpdateTime: "2026-11-02T18:00:29Z"
    message: Auto-approved CSR "csr-tn8nv"
    reason: AutoApproved
    status: "True"
    type: Approved