--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T16:52:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T16:52:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-16T16:52:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-16T16:52:38Z" name: csr-gjk5c resourceVersion: "6793" uid: c3da5666-c53d-4bcb-85ac-50868b5b18a8 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d1ec11c83b6486e9d6fe7371e0f250b1ef75a28285af9a85487cb8ae2adae827 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemd0TVRVd0xtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkpLcnRuOFM0K0RkeTRHYit5aWczNEJGcmdZWHJBVW8KNnA0dGFDYWxkTkRGc21waGNGUEJPMXZZNG5FeGxDR1oxNy9vRXVDVm5Nc29VM0F2eEEzZTRlZWdBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlFQXNYTGVHQTRjcDkveDdlcjg3Q3Jsb25Vdm9RZ2hOYlhXWlY1S2J4SFhVcklDCklGRjQ2YU1CREYzT2ZmQ1c5d0lXQS9CTXBRMjlpYjhrTm9ZWTFIbmtWMVpmCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-150.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T16:52:38Z" lastUpdateTime: "2026-07-16T16:52:38Z" message: Auto-approved CSR "csr-gjk5c" reason: AutoApproved status: "True" type: Approved