--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T11:31:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T11:31:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T11:31:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T11:31:11Z" name: csr-dhgq8 resourceVersion: "6647" uid: c9a9fd43-49d3-4999-a69c-f553b49b8a7a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3b048ae8455a80fd0214af4a5d45c3bfa3bc916a00bb084672709c6c68f51dd9 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemt0TWpFekxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkZnUGNkRmpkWVBGcjF1Y0VzN0oyUDV5SU0wYUtDQVEKanpnQ2xTZSs1eFJ4TkNlaUhMWm1jUU1RSzRtekxvMUtWK1ZLcUdvWTdFRzNaaVdVSWpYREl2NmdBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlBblZBMXU1djg2QzZvd1FNd3h6c2VYWWcveFJhN2t3QXdDQ01oN05Zc1c5UUloCkFNV1kyR09HZzZxdmtJUEhOZFRyckxVaGRxY21NQlhwaWxqazVaSkZ1blE2Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-213.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T11:31:11Z" lastUpdateTime: "2026-05-21T11:31:11Z" message: Auto-approved CSR "csr-dhgq8" reason: AutoApproved status: "True" type: Approved