--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T04:24:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T04:24:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-07T04:24:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-07T04:24:33Z" name: csr-zsrz9 resourceVersion: "7024" uid: 30011d2a-4bb1-434d-b164-496028eac647 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b2fbe600cda457f432e9a55cff7ad7e1bd5ac83742726afa6bf6f88cc31530d1 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamd0TWpVd0xtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk5mcHVacVlTby8wQnRwQnJDYW5wY0xLNU9QSjlJSzIKaHpXSmRBUkVvdXNXdldTbjdQaFNGN1FGVldwZmZTUVJzd3pvTEh3UlpnTVpQWmdIbWVPb1pMK2dBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCTkxxR3RmS3EwTjExQkpJaW9wbXRnM0dnRk9LUWFhU1RXTzN4WUJMcmI0QUlnClM1VCsvL0xHNWZTSTRTTUZYbGpLdzQwYytrYTVuVW1KSWhZODVvSks0ZWc9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-250.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T04:24:33Z" lastUpdateTime: "2026-07-07T04:24:33Z" message: Auto-approved CSR "csr-zsrz9" reason: AutoApproved status: "True" type: Approved