--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T12:27:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-10-31T12:27:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-31T12:27:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T12:27:30Z" name: csr-ndxf7 resourceVersion: "6951" uid: 9c52f2e6-1255-45b9-a895-9d97f8941ba8 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b79d542fe6b4a44d28e0e8a6835fc417862e137979fd077d45042487695b08c2 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkd6Q0J3UUlCQURCZk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1VSXdRQVlEVlFRRApFemx6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREl0TkRVdWRYTXRaV0Z6ZEMweUxtTnZiWEIxCmRHVXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU2Yyc0pIZThrUkZwK3kKUHdNY3hISmlHT0xLbldXZGh3UzlKOC9zT2dGT2hMWU94Q1Q1ZUl5VHEyNDNqQ1l4ZGh3NmQxTjNCNnpCYSt0RgpVQ0lqVms4WG9BQXdDZ1lJS29aSXpqMEVBd0lEU1FBd1JnSWhBUDVEK0ZOaXAzL0pKR2RMNGRlZitrL1lmNXNVCkh4MVNKQVBOL0Nlc3oyOFZBaUVBaEw3aW1EN2xwd2d5VEVKL2dIZzl2WmdVWnhOUTRxWllMOTFoQkNZcktrRT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-45.us-east-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T12:27:23Z" lastUpdateTime: "2026-10-31T12:27:23Z" message: Auto-approved CSR "csr-ndxf7" reason: AutoApproved status: "True" type: Approved