--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T14:59:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T14:59:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-08T14:59:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-08T14:59:45Z" name: csr-gxp2w resourceVersion: "6930" uid: 554ff0b2-37e9-49db-b5ee-513522bd0cdd spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f3ecd13a4cb5f2ad607818cf56ae70670e07f01f137e0f6d26a8eb334ac03d4b groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRqQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemd0TVRnekxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkRGZnNzeUtzcVg3TEIzdmIzdCs1bm1IalV3c1dRcGEKeUIvQUZqaVlvOHNnL3RQMUFwK05Gb3dJZmdkR1NvSVMxaWtKRDJyRlh6dHFVRDgyQytORzhjaWdBREFLQmdncQpoa2pPUFFRREFnTkpBREJHQWlFQWtQbGk0c1RGOWNLNU9jOVZVV3hjS1VOdjQ2MnNsUUFXOFh3VkI2b1AvQ1VDCklRQ0xiVjVjZ0hMZlY5RzdKRGtPa0RBNGg3UWY5UEkxSTJseks3V0RnN1lIM3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-183.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T14:59:45Z" lastUpdateTime: "2026-06-08T14:59:45Z" message: Auto-approved CSR "csr-gxp2w" reason: AutoApproved status: "True" type: Approved