--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T20:08:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-03T20:08:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-03T20:08:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T20:08:27Z" name: csr-nt8k2 resourceVersion: "6831" uid: 8ce782ec-922d-44d6-96c2-ec2eedb4824e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=fde3017a4bc5f6f1a950149c8a0a52bbfafd66230a395aaa8f35f4bb26959265 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkdqQ0J3UUlCQURCZk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1VSXdRQVlEVlFRRApFemx6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREF0TlRFdWRYTXRaV0Z6ZEMweUxtTnZiWEIxCmRHVXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUzFFOXcyL2ZGc3Bic2wKZm1JSk5Ld1ZwNlFzMXpsV0NxaW1STzQ1ZTR3cHhtRHJGNExVME91MlZORmNhUVBMQ0pNWnArMUR1L0NCenFTMQpYMm5xSHJtL29BQXdDZ1lJS29aSXpqMEVBd0lEU0FBd1JRSWdKVTIyNnlPSTAySTZ0Vnl6SGl0RUdDZk85SzF6ClYyWXM2UU1sWnhLUDNsUUNJUUM3QkNBOEU4b1g0QjF5NVdsbWhpVExFNWtNN01mZ2FHVUR2ai9zTHk2VDB3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-51.us-east-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T20:08:12Z" lastUpdateTime: "2026-11-03T20:08:12Z" message: Auto-approved CSR "csr-nt8k2" reason: AutoApproved status: "True" type: Approved