---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-11-03T12:54:16Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-11-03T12:54:16Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-11-03T12:54:16Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-11-03T12:54:16Z"
  name: csr-z5z9s
  resourceVersion: "6136"
  uid: 569a5eb3-5298-4043-9279-4bb19c318d41
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=63efd9abc7ae5f5e24f977a4e82e3e0ac9b88b75d8eeb78e867ba7ca1e3c3ac9
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-142-74.us-west-2.compute.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-11-03T12:54:16Z"
    lastUpdateTime: "2026-11-03T12:54:16Z"
    message: Auto-approved CSR "csr-z5z9s"
    reason: AutoApproved
    status: "True"
    type: Approved