--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-24T21:27:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-24T21:27:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-24T21:27:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-24T21:27:02Z" name: csr-shxzx resourceVersion: "6304" uid: a8fdc751-4ed9-48ed-bcaf-d8510cc53707 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=25533f7563a6b5eb45a74a5a3d1d910d842d7dd9000e0574b67eb8cd3c2eb551 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNek10TWpBNUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkdSMzBDZ2huSFc0VUk4K3JhZStGeStQMzJEOHZkSzYKc0VHdGZpK3pjWEJ6UkpJMWNoaURZWUk0RVRhSFB2cHpSYjkxN2xYQjRpQXFDNG1ERjJKYjNwQ2dBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlFQWhXTXd0K3I0T0c4NXdiSnlJMmRweEtSZHNDS2ZHUk9pOEFCMFdTSWJvRUVDCklHQjBHTkRocWhWLzdyQnlXSC82dlZabnQ4NWd1QUdLNzg0aHRtT0JWZUZ0Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-209.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-24T21:27:02Z" lastUpdateTime: "2026-04-24T21:27:02Z" message: Auto-approved CSR "csr-shxzx" reason: AutoApproved status: "True" type: Approved