---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-28T15:33:09Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-28T15:33:09Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-07-28T15:33:09Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-07-28T15:33:09Z"
  name: csr-kh65q
  resourceVersion: "6376"
  uid: c3918bf0-6a9a-4feb-8f59-99d294327f66
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=63a156eaf72ae9b41bef0b6d51cc9adc7b5d4cc752960fd60a9689f524b252e1
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-143-228.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-28T15:33:09Z"
    lastUpdateTime: "2026-07-28T15:33:09Z"
    message: Auto-approved CSR "csr-kh65q"
    reason: AutoApproved
    status: "True"
    type: Approved