--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T18:39:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T18:39:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T18:39:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T18:39:14Z" name: csr-xn7jn resourceVersion: "6373" uid: cfaca15e-ac31-44c1-ba08-621f44322775 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=129a7aa06b802e3c6293f52ea01140ffacba5f68c47dcbbb4f2c2f6033454781 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0JzZ0lCQURCUU1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UTXdNUVlEVlFRRApFeXB6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemt0TlM1bFl6SXVhVzUwWlhKdVlXd3dXVEFUCkJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVFPdFNYc3lEZUF1cXpDNlBiN21CK0RXamh3ZUpQMWlwVTQKbUtjemQyRktKL1kzME9QZFpGNnhJclo0NDNnQUMyaWFvWlpNRDlGU0JIYXNrQVdwUW1icm9BQXdDZ1lJS29aSQp6ajBFQXdJRFNRQXdSZ0loQVBmVFk5eFVuNnZPT1NnNnAvak00em5nRUE4SVQ1TlF4RkJDdDFhTHNnK2lBaUVBCjMrU1gxL2JGeE1jUDdLYUkyaFgrUS9zZDRVcVVzSko5U1E3UW1oOUEwQXM9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-5.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T18:39:14Z" lastUpdateTime: "2026-09-17T18:39:14Z" message: Auto-approved CSR "csr-xn7jn" reason: AutoApproved status: "True" type: Approved