--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-05T17:49:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-05T17:49:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-05T17:49:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-05T17:49:25Z" name: csr-rxctk resourceVersion: "7012" uid: 4b6d6a64-7553-4aa8-b3e1-1232acb80182 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=08525f9362216ed8bc229b53793fb6052ef76dd07d804716adc2aae58b377ce9 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamd0TVRZNExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkdCejVkVjhpYzFHTkgzekNGSlhJajJ5c2tidGFoS0cKRkZSSThpaXdlaXE4aFV5REgya1Uvb0FWbWR5TnZkWHkrY1g3dVYzcFZ5a3d2OTcrbkU1M2JXR2dBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlFQW54dUN5S2VZZGdxd2g0ckt5UkQ5RFk5dkVJNTBUSG5kVENwdWhEQU9Fb1lDCklFbFhyRFMxUUZKR0t5SldJME9NWFVRVzFJcTBJaUJpMHgwVldVRHJ4WVg1Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-168.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-05T17:49:25Z" lastUpdateTime: "2026-06-05T17:49:25Z" message: Auto-approved CSR "csr-rxctk" reason: AutoApproved status: "True" type: Approved