--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:34:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T18:34:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T18:34:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:35:01Z" name: csr-gf85c resourceVersion: "7852" uid: 194328d9-2053-4c20-a6ff-bfaaf669f236 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=db24b9405a3b197a9adaf4987ea5d132ddc1889e123e3e281e5cd83e6c6f703b groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkNqQ0JzZ0lCQURCUU1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UTXdNUVlEVlFRRApFeXB6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREV0TlM1bFl6SXVhVzUwWlhKdVlXd3dXVEFUCkJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVNnK1NsVldJRmZEZHRBZ2Foakc2TEhlSE81VlFFSlVzOE8KRW9VcHpxbE5nUStnb2FzaU1PeXhYRHhXSGJQOU93bGVFOHQwOXpyeU5QeE83cCtoRGhyMW9BQXdDZ1lJS29aSQp6ajBFQXdJRFJ3QXdSQUlnY2JRZU9kdVhZY1pXcDNDMHpwdFlDdjhMOXNyRFdMcVM4M1Q1QXZxbW1ob0NJQ1ZDCnNEUlFpZ003R2hYczR3OUhJbWN0eEEybDMyVXRzWkxoLzhBa3Z4YmsKLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-5.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:34:46Z" lastUpdateTime: "2026-07-09T18:34:46Z" message: Auto-approved CSR "csr-gf85c" reason: AutoApproved status: "True" type: Approved