--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T18:32:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T18:32:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-09T18:32:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-09T18:32:10Z" name: csr-2f2zj resourceVersion: "7098" uid: 094da0d1-d96f-44ce-a23c-9bf5fec9063e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2a185b5f7dcf6d51f7c617dc24dbacf030d63c5465f0e0c9ac0136015e95ae56 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNelV0TnpNdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFa0diN01UakJkbEM5elZHZzJnVFltdkJUbk1tYkVIUDYKYVpXQkFSM2RKZnV2Rmg4b2o1T3VpU0MyQ0VRSWN3NXl4TUQ3WllnRFFZaWV5bUEzMTlFMjBhQUFNQW9HQ0NxRwpTTTQ5QkFNQ0Ewa0FNRVlDSVFDOGRENGJQTis4TWlWL3dWd0hEOWdBcWx6MHBzaGYvTFlRcjFvREozajRNUUloCkFOK0FwcmF6TTNRaG1ZZzZqWThsekZERWNvL3UvWjBIVnJyNmhobFJzQXA5Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-73.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T18:32:10Z" lastUpdateTime: "2026-09-09T18:32:10Z" message: Auto-approved CSR "csr-2f2zj" reason: AutoApproved status: "True" type: Approved