--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T21:31:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T21:31:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-02T21:31:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T21:31:35Z" name: csr-knhzk resourceVersion: "6937" uid: a18825b7-7aa7-4d07-ba85-f43c96e0fc73 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=86d34b37969d91eabfb3f1a387af9aa6cdc20b390cb1d1819a8ff52dacf2b14b groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemt0TVRFd0xtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkRldElyVVMxUHpkb0VZbVk5YmMzOUtSRXRpbEo3TG0KTk1oblJUVm1mcnAxZ1hGZHlHMGhTOTlKaDR0bjFWRW9hS2lpaTN5WWF2Zjc3RWI5MEQrUlI2aWdBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCRXlYYmtmc0NFYmRDbDkvTDFycDRidEovWnlROWxjQUZJclVOUGNQQkxrUUlnClBkbVNLZkY2QVVmdUFtMnFnM2RSa1E2T0NyS3FHMHhuVk1TZ3FoSWg1RFE9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-110.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T21:31:35Z" lastUpdateTime: "2026-07-02T21:31:35Z" message: Auto-approved CSR "csr-knhzk" reason: AutoApproved status: "True" type: Approved