---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-05-26T16:01:14Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-05-26T16:01:14Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-05-26T16:01:14Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-05-26T16:01:14Z"
  name: csr-cw9xk
  resourceVersion: "6003"
  uid: 2f130a51-00ca-4f0e-8c01-457df1cf9c7a
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=5f666bfcd0f05b81fd0af475d6741af55e1911d11f45e6509c930d941f26ded8
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-131-126.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-05-26T16:01:14Z"
    lastUpdateTime: "2026-05-26T16:01:14Z"
    message: Auto-approved CSR "csr-cw9xk"
    reason: AutoApproved
    status: "True"
    type: Approved