--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T21:25:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T21:25:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T21:25:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T21:25:54Z" name: csr-mp9tq resourceVersion: "6793" uid: 9c7ddc78-179f-425f-ab80-f8dcb2ad9afe spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9d8a276f9094aa99fde870c8b76da5001d54668c3308bb0921bc681370113178 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkN6Q0JzZ0lCQURCUU1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UTXdNUVlEVlFRRApFeXB6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREF0TUM1bFl6SXVhVzUwWlhKdVlXd3dXVEFUCkJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVI1c3B4VThPTzUxOHcxbjZiVU5qWHBUNEdxLzBNMW5kZ0EKcFdqZnlDbURaYWs0UHlIVStGMHdoVm5sUDUzQjBKTFBnbGZ2alF3T3RLd1U1OWJaMnlFVG9BQXdDZ1lJS29aSQp6ajBFQXdJRFNBQXdSUUlnTDlDQTJEMnRza1BiMDcwSUVVRWpSc2hJam0yNjg4VDdqN2JMVnN3ZEJpTUNJUUM5CjgwVW5RWE9SNzVKUVIyTFFUOGtWS0lrc3I4VEtHSjRKa3JlZXlyQ2tGdz09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-0.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T21:25:54Z" lastUpdateTime: "2026-07-27T21:25:54Z" message: Auto-approved CSR "csr-mp9tq" reason: AutoApproved status: "True" type: Approved