---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-04-16T16:23:42Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-04-16T16:23:42Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-04-16T16:23:42Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-04-16T16:23:42Z"
  name: csr-ktfpd
  resourceVersion: "6921"
  uid: 53bc3fa9-8b7b-48b1-a72d-fddca55e92b8
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=3116a28eb624a89a10ddf8e4eb9052eae64fba4a2befd805898bbdb2cd7d6293
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-138-125.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-04-16T16:23:42Z"
    lastUpdateTime: "2026-04-16T16:23:42Z"
    message: Auto-approved CSR "csr-ktfpd"
    reason: AutoApproved
    status: "True"
    type: Approved