--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T23:47:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-15T23:47:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-15T23:47:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T23:47:56Z" name: csr-zdqcs resourceVersion: "7807" uid: f5e5643b-ca7f-4cdf-b388-c76953602aab spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=99812bb51892c56e8f2c18a0a4d91f4ee3c2d379670a9e26414580a25cd53ca1 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamt0TWpFeExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkpDNlJwcE96ZjNmWWcxTjl2c1g3d0ZtOE1MMm80RnUKZEhqc29rZ2lFVGdjZ0VoL1pJWjY1UWdHSzZBVHRaR1NLZ1YwczdlaHB6TS92NjlJYkRkbjVJaWdBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlBdDM3Tm53OVZqZVdtRWFPOVNpN05waHo2b2tIRXJ6eE5wU2U1RTB4cVB3d0loCkFKYlYrbkwwby94UFRET2VBSk5jTHZsc2pPeHhLZ0d6eHNDYU9rNmFCbjVpCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-211.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T23:47:52Z" lastUpdateTime: "2026-07-15T23:47:52Z" message: Auto-approved CSR "csr-zdqcs" reason: AutoApproved status: "True" type: Approved