---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-11-01T22:22:16Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-11-01T22:22:16Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-11-01T22:22:16Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-11-01T22:22:16Z"
  name: csr-2lk8f
  resourceVersion: "5902"
  uid: 4307de8d-a703-4079-b9f8-c38dc143760d
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=5d58d8ddb0d5e8743fd83c9323d54a209685e5b0322d1716935a6fba5256a08a
  groups:
  - system:nodes
  - system:authenticated
  request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkdUQ0J3UUlCQURCZk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1VSXdRQVlEVlFRRApFemx6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamd0TlRVdWRYTXRaV0Z6ZEMweUxtTnZiWEIxCmRHVXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUTluYmZ1alowc0tyWmoKbU1GU2k1c3l1SjlZcFdQMHRvQ0M4TkRnOW5uMHpqeTBWL21RNmNxcHlLdkN6ODlOVmpsZ2NtTHEyRXZ4R0UrbwpoZEJrWnN3Sm9BQXdDZ1lJS29aSXpqMEVBd0lEUndBd1JBSWdHUWhubkFoRndQQnRnUC9kUkNvZHZFSlpLZlkxCmN6N1dnZ3VObit2eCtzZ0NJRVpscjZXa09aYlRhY3BMWWhESE1CTnQxcUdhdHBvYmhjaFI0dU8yTVE5cwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-128-55.us-east-2.compute.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-11-01T22:22:16Z"
    lastUpdateTime: "2026-11-01T22:22:16Z"
    message: Auto-approved CSR "csr-2lk8f"
    reason: AutoApproved
    status: "True"
    type: Approved