--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T08:38:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T08:38:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-03T08:38:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-03T08:38:52Z" name: csr-zbkms resourceVersion: "5764" uid: bf71114b-542d-43a1-ac3d-169c61eaef0c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ee8ceb1f267b107e7550e1f359d937c35f59b6879883085d9d2373cfdddaa204 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkdqQ0J3UUlCQURCZk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1VSXdRQVlEVlFRRApFemx6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREl0TWpZdWRYTXRkMlZ6ZEMweExtTnZiWEIxCmRHVXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVDFDdDRoZlpDejVab0QKVXVoa0grMDYrRzJxS2oyQUE4aGJod1ZkV3FDaUtlK2gzdHozVmdzYTUveGNGb1VIOXBFU0RKYlk3K2lCdzJaTApFZHhWSlpiU29BQXdDZ1lJS29aSXpqMEVBd0lEU0FBd1JRSWhBT3FjWGJ6YWxIaGQyc1hXdHpnSTMrR2JyZTZvClQzWWlDMzBON29TSkVRdGFBaUFQbFN0a1JKeGcvYkRZTmxscEJtOThzR051ZkdrUGw2UjFhR2VwSXlUTlNBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-26.us-west-1.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T08:38:52Z" lastUpdateTime: "2026-11-03T08:38:52Z" message: Auto-approved CSR "csr-zbkms" reason: AutoApproved status: "True" type: Approved