--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-20T21:27:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-20T21:27:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-20T21:27:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-20T21:27:07Z" name: csr-clc8j resourceVersion: "6816" uid: 7f97ef02-e15e-49ac-bba5-ee75e7c9e573 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=1c66721523b85a6bd0ba4023d6cef4481ec0f35cac3ec66bc599e7b7ba8dcc3b groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamd0TVRrMkxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkppci8zaHFaejVMTFJBS0c5VzFvTGZzbXNLWlVCSGEKTm53N2lMclZncG1vdjU3bktJTWZZaDI1c3VxV0JuRExQTCtld3JtSG5ib01wbXpVa2lZc1NmU2dBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlFQXJKWGhNc1JNelZueUkxdGtGaUFtTVY3WGU1dkduN2dYeTRqNUpiRTdpV29DCklBQ0ZlNWtleStSSDMxeDlsWTIxVzRXMk9xYklucTFvUVNBbTE0enEwQ1VjCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-196.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-20T21:27:07Z" lastUpdateTime: "2026-05-20T21:27:07Z" message: Auto-approved CSR "csr-clc8j" reason: AutoApproved status: "True" type: Approved