--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T12:40:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T12:40:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-21T12:40:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T12:40:05Z" name: csr-kxf7q resourceVersion: "6493" uid: b54ad04e-1fb9-4c5c-9fe2-07c897c63c71 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2295206cf3f7b82883be43824e00a0355a0e8a8e179b569a26b2c9bf156606fa groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkN6Q0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNek10TXprdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFQ0pNUVZURGM2bXFQWnNCS0M3eEUrSnhmSUtWZFpBbWkKYTgzeUhSb1VZS2hwaGRHdkpvSm1lSUdsYm13MHhVVmlEUHZDRFNhbXJDb2lPTFRTL3FJWjVLQUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwY0FNRVFDSURWQ29waEpGWUltLzRvY0FNUHNwcHdtR2dSZk0rYW5RTlNHMTJRcVV3QS9BaUFuCmc0K3pBMFlMYis2S1krK3c1U2QyZm1MYkJXUmo2OGRNYlpRZENHeVJDUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-39.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T12:40:05Z" lastUpdateTime: "2026-07-21T12:40:05Z" message: Auto-approved CSR "csr-kxf7q" reason: AutoApproved status: "True" type: Approved