--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T18:13:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T18:13:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T18:13:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T18:13:42Z" name: csr-tgfb5 resourceVersion: "6195" uid: 7e1e9580-ce94-497e-b945-69444f13f4f9 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e2ef243e36f86158039c5bdacf6b1f83331d625da2a7efd21287c7e4b3cf62b5 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhORE10TWpFeUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkttZXJlc21LUi8wY042UVAyZFZtcEpobjJRVytJYUQKQlc5S3VxQi9KR3VscS85emlWaFk4WDlXRVQrd3FTYWxpN3ZUczJjWGJMZkhLNUpZNzN1ekRBMmdBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlBWWtNU2F6RVlkcVNOYVk1Vi9KYXFuZDA0MEFsaE9yS0JuaEhCbEFFMDNhZ0lnCk9vdEhzTEZDSGdWQTdpZ3Arc0E4WlNEMDREbFI5WjhPQlUwNDdjZHdMS289Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-212.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T18:13:42Z" lastUpdateTime: "2026-05-21T18:13:42Z" message: Auto-approved CSR "csr-tgfb5" reason: AutoApproved status: "True" type: Approved