---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-16T18:45:57Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-16T18:45:57Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-09-16T18:45:57Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-09-16T18:45:57Z"
  name: csr-9fs7w
  resourceVersion: "6163"
  uid: 8bc2bbdd-33db-465b-b43c-73c91023892d
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=200ec8241b262529fa2da16e8ae5c8db111252e2c97a1e98a85c8b6d91bb72ea
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-138-127.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-16T18:45:57Z"
    lastUpdateTime: "2026-09-16T18:45:57Z"
    message: Auto-approved CSR "csr-9fs7w"
    reason: AutoApproved
    status: "True"
    type: Approved