---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-17T17:56:57Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-17T17:56:57Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-09-17T17:56:57Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-09-17T17:56:57Z"
  name: csr-k28st
  resourceVersion: "6428"
  uid: bca02836-2bca-46d0-8e25-21502b9bd0d1
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=132887e65e7d5c971c50c390b29ce39a58ef2526caeabbd63a05720da82b13b7
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-133-151.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-17T17:56:57Z"
    lastUpdateTime: "2026-09-17T17:56:57Z"
    message: Auto-approved CSR "csr-k28st"
    reason: AutoApproved
    status: "True"
    type: Approved