--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T17:57:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T17:57:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T17:57:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T17:57:05Z" name: csr-f29lg resourceVersion: "6311" uid: 72f0f32a-3f67-42e0-adad-773a0c66aaed spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=26cb45d44d7a2eb1dcb42b390cd51e96b63b745432ecb295e20920f213d51135 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREV0TlRJdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFOS81K1A3WldTNnRJZ1pZdVBmeFp3cCtqVTRxZHZjVzEKRjhFeWJJZDlEaTdrVkxVNDA3OS9OcS9Ga29sSDlicE5wQjBBY21IMGcxaGZTWUNsV1UrOUE2QUFNQW9HQ0NxRwpTTTQ5QkFNQ0Ewa0FNRVlDSVFDcDBwSjZ3aUdrNkhCNjVhU2JsTlYwcVlvQmZqSWIvT3JyYzVQL1o5NFRvUUloCkFNZlpMSmpRYllNSk9MN09qTzVFSEprOGYwbWE2Y0QwNDBDY21tb1dDV1dmCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-52.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T17:57:05Z" lastUpdateTime: "2026-09-17T17:57:05Z" message: Auto-approved CSR "csr-f29lg" reason: AutoApproved status: "True" type: Approved