--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-20T18:59:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-20T18:59:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-20T18:59:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-20T18:59:28Z" name: csr-2gkhk resourceVersion: "6342" uid: 3adb20ad-49d8-4f10-a39a-5fbb447a4412 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=cb8b3fc818179474b376a982a2f723512951cc9fec10dd020250d6a7bd8f922d groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemd0TmpZdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFMURJbDIyWitUenJPdk5mc3NBZnZ6RVc5cU5zV1FKVnUKdUxYdFlPdURsaGdtSWlocytJUXcrZDc0M2ltdy9Iakl6NU51UHFzWGJuKzlBRXhoZGJSOVg2QUFNQW9HQ0NxRwpTTTQ5QkFNQ0Ewa0FNRVlDSVFDV2lwVVNjZ1JibXFmUjN1bGFOMmNuNFBKN0pDQ3FxNmhXRkdQNTM2WUhqUUloCkFPVys0VDljZy8wM2N2TVhQaGI0ckllUlVyWC9IUkVNL002cXhVNFJNOXFDCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-66.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-20T18:59:28Z" lastUpdateTime: "2026-05-20T18:59:28Z" message: Auto-approved CSR "csr-2gkhk" reason: AutoApproved status: "True" type: Approved