--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T17:50:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-17T17:50:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-17T17:50:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T17:50:25Z" name: csr-k97kq resourceVersion: "7916" uid: d1f3ada1-a4e0-481c-9a81-15c5b846c79e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3cd7c2ec3cf48fac10af754f0cc66e23db69a3ed5392e01d3f8443d3e24fae72 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREl0TVRVMUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkI5WExYR1Q4bWtFeGNWMjFCWXduTi9xMXd3UGhrZDkKaU9YSWpvb1dzZnVDRkdVdDJFdXNVemVRLzUyTFdCNk1NTXpMS2xDejBLWTB2eUlxUmx4WTc0Q2dBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCWXRBT3EzbjgremNNM1ZTTTdIZHJUUmplcEdMS25SVTB4L0FGb1Iza3F5UUlnCmRxRkVZT3FIOVQrazAvT0RrUmFhaDg3R2dDQWZHWTllSnQ3Vitwd1pPMjQ9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-155.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T17:50:16Z" lastUpdateTime: "2026-07-17T17:50:16Z" message: Auto-approved CSR "csr-k97kq" reason: AutoApproved status: "True" type: Approved