--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T15:31:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T15:31:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T15:31:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T15:31:54Z" name: csr-cl9c7 resourceVersion: "7097" uid: f83efc75-1375-4424-8f75-89b505262de0 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=df1dabd8d7b1a6224bce16c6bd0e998f4fc71f3b1b32545aedccd6c08044e0ef groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkN6Q0JzZ0lCQURCUU1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UTXdNUVlEVlFRRApFeXB6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNek10TUM1bFl6SXVhVzUwWlhKdVlXd3dXVEFUCkJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVRNRFc2UjZENmxpUXZWWWIwUnBJL2EyYVBtcndrL3pPUUQKdFB4NmdJckFvY3djNGxjUkFvaVhrejhUaExKaG90dUpnVUhVQ1hqcHoyb0QxMnRvM21zdm9BQXdDZ1lJS29aSQp6ajBFQXdJRFNBQXdSUUloQU5LcS9kZW84VVRjZEgyT0owdHdSazlsemFBb2M5c2NZQlJ0RlBsU0dCMHRBaUJSCktiOWQ3WGE3Mkl1YmxSYXpkVGlMeXVmWUlEQjFtYjdFUmp0OU9BS2tJQT09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-0.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T15:31:54Z" lastUpdateTime: "2026-07-09T15:31:54Z" message: Auto-approved CSR "csr-cl9c7" reason: AutoApproved status: "True" type: Approved