--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:38:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:38:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-22T18:38:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-22T18:38:17Z" name: csr-kzc9v resourceVersion: "6557" uid: d8590dfe-d972-4c69-8e55-c72b508183a1 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=705f123cab8607435e3ab36b2610da07ea02c471e57224e521d651f10d080887 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNekl0TVRVeExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk50VGhkTUwwSXBncElkV2RTU2JGWTRiN2lLQTEwdWoKcWMwZ2d4c3BYazVyYzRxNDJlTTRwOUJ3dEV6a29nOHNSRUhaeGVSN2lSRmdJQzZEd2NBQ0hmR2dBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlFQXpvOElkekVvU2ttYlYydFQ1c3NTenNWV1g2SXFYc09EbkNIK3pHSkowRkFDCklCam1hdnFMNEdycTlMZ09FVnlEdDYwcVFyWTRoN3NDZ1JvT3J1aDIzQmlqCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-151.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T18:38:17Z" lastUpdateTime: "2026-04-22T18:38:17Z" message: Auto-approved CSR "csr-kzc9v" reason: AutoApproved status: "True" type: Approved