---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-02T15:40:21Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-02T15:40:21Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-07-02T15:40:21Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-07-02T15:40:21Z"
  name: csr-nkfkm
  resourceVersion: "7175"
  uid: d6d1b400-182f-4a4b-af9d-4545646b0377
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=5b221c51ee7a88bbc3370a8cae955bbdd060d16e033e4fad97d916c8709ec4be
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-130-4.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-02T15:40:21Z"
    lastUpdateTime: "2026-07-02T15:40:21Z"
    message: Auto-approved CSR "csr-nkfkm"
    reason: AutoApproved
    status: "True"
    type: Approved