--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T09:14:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T09:14:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T09:14:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T09:14:48Z" name: csr-hx5mc resourceVersion: "7122" uid: b823881a-8aa1-430d-85b1-6e418726ec98 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2ab151d699575ee63e60ae4517bcbd396c509706f45fb6c11cffd8c5bf149144 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemt0TVRjd0xtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkx4L1JtTjgvUTZ6Q05mMGdPOGM0bDMxV2ROelErN1MKQkFtMDFLZ3JsMlRzS0FuMmpFUFZ0czBKTHdjUFRuaGh3bXR5blJmYVNZUVMzSkVKUFo4emtkdWdBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlBaDdMRjFRcm1tUmwrWklLclFKbXlUVDNIWGIwTFlkU2FQemlVNGJkUHB1UUlnClQ2Q0cyNjBDV0U3T0hxRFU4UkU0OVZ3TzlMWXRwdytVSHFVVFdOd00wSU09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-170.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T09:14:48Z" lastUpdateTime: "2026-09-10T09:14:48Z" message: Auto-approved CSR "csr-hx5mc" reason: AutoApproved status: "True" type: Approved