--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T07:03:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T07:03:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-20T07:03:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-20T07:03:11Z" name: csr-q8p6m resourceVersion: "6292" uid: 430358d5-8c4b-453e-bc6e-8252d2588d80 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=565556ebd689f0d1e35740b6f047bdd463b1a4746a253cd213396f46e19ce140 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRqQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNekF0TVRBMUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkdiZXRIK3ZSODJvMmc2Z0I4czk2RU5LYTVwcjdiWHcKeUdTZnZXVlo5SVRNdjlXREVOSmZyZFlaUlF4Y0p0M0VhT1VreGF6TFB5RFN3OW9icVhvVnFueWdBREFLQmdncQpoa2pPUFFRREFnTkpBREJHQWlFQWlGeCs4WDdPKzV6Q2hkQm9YaVdsNFBZbFNJYk93aEhqSXF1dGs2MjQ4RkFDCklRRElXY3BZQnFLRGNxWG05VDVQWlR1M2kzVklTU3FYTjMvSU04eWZOc1Z6Tmc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-105.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T07:03:11Z" lastUpdateTime: "2026-04-20T07:03:11Z" message: Auto-approved CSR "csr-q8p6m" reason: AutoApproved status: "True" type: Approved