---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-05-06T17:10:52Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-05-06T17:10:52Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-05-06T17:10:52Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-05-06T17:10:52Z"
  name: csr-kb9l9
  resourceVersion: "6660"
  uid: 5dab1f53-6063-4cc0-9863-cbf83b3229fc
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=67621c2630591b8ec23a77941f17dfad36a9fac6596b9c389f580d61d3c9749c
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-131-115.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-05-06T17:10:52Z"
    lastUpdateTime: "2026-05-06T17:10:52Z"
    message: Auto-approved CSR "csr-kb9l9"
    reason: AutoApproved
    status: "True"
    type: Approved