--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T17:57:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T17:57:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-23T17:57:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-23T17:57:46Z" name: csr-n895t resourceVersion: "6363" uid: 0afc59d0-1a6b-4e85-a14c-841228f53d38 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=028174049acb97063d49a5618566b1e08c5292df17efa11c600b11f0261ad7a0 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamt0TnpFdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFUUt2UGJDb0ZzOEhqeWxtb3o4enJoeG1JYVJkM1Z1T0IKa01PWUxSaVNGTG5oaU9Ibk5vTkNWcnFpanZ3VEtKMzRDK0d6OFZ2eTYxUUhwUGZ3V1dML2JhQUFNQW9HQ0NxRwpTTTQ5QkFNQ0Ewa0FNRVlDSVFDMTc5WWN4bG9MS000ZUVENUwwRlFyYlJWVmxRU1RQekhVbEhQWDZ2SmFBd0loCkFLZi9aOXFXbmkxTXhGKzROQVIxdTBhbkZJelpKUTZ4bkxCR2tEYW5aeE80Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-71.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T17:57:46Z" lastUpdateTime: "2026-07-23T17:57:46Z" message: Auto-approved CSR "csr-n895t" reason: AutoApproved status: "True" type: Approved