---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-11-04T03:17:04Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-11-04T03:17:04Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-11-04T03:17:04Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-11-04T03:17:24Z"
  name: csr-z98d4
  resourceVersion: "6991"
  uid: eef4c781-1457-4809-b013-24b7f05a51da
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=f1fcffc6af42224836d7bf0ab470670ba768eded994cfa5a0e113ee06f14a6e4
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-133-6.us-west-1.compute.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-11-04T03:17:04Z"
    lastUpdateTime: "2026-11-04T03:17:04Z"
    message: Auto-approved CSR "csr-z98d4"
    reason: AutoApproved
    status: "True"
    type: Approved