--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T17:53:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T17:53:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-22T17:53:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-22T17:53:17Z" name: csr-rj4nz resourceVersion: "5852" uid: 47fa20ec-c063-4c0c-9506-1f0476880ddb spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3af14c7aa2ca65b0df8f854afb3811361a4e1f8bcb7e111ef5a0172ccde678fa groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREl0TVRFNExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk9yc0tWOURzSVpTeXhxOC8rSFdiT0dyMXVtV0lVWlMKcUYrWlRpTnNuVXZBbDNMQ0JZQzN4Yy9sYVpMQUQ1SHdzUlFNZmswaFo2alpsc3NjM1JmSFBkNmdBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCV1pub2IxVnd0aTZUSTZaaS8yWjdPSldhU21oRXB4SVgvYlV1UE15Q3FvZ0lnCkE1bXRSRkh3OUpXL3pyTlVueGNRM1V0RStSWFhtSTlaUWVWS0VMVnVGM3M9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-118.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T17:53:17Z" lastUpdateTime: "2026-04-22T17:53:17Z" message: Auto-approved CSR "csr-rj4nz" reason: AutoApproved status: "True" type: Approved