--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T13:58:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T13:58:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T13:58:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T13:58:49Z" name: csr-r4xvc resourceVersion: "6706" uid: b4e68c8a-281f-4482-8c32-5076e92a1cfa spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=89ad557ae53146ba345b2cc9aae334613d5685f2fe2813e36767b24c032581e9 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRqQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNell0TVRVMUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQktFdk5PbGI3TGljTSszdlNYZmRnTTZsWGxuT2FGbzIKajArVEtSdkVoT1hpSStzdjQxRkduVDl1SHVHOC8rZndmYndzSURYeGdNdUZ6STBXVlhmWUgwT2dBREFLQmdncQpoa2pPUFFRREFnTkpBREJHQWlFQXVBZll5ek5POTAvS0ZnR21pM3FwTVkvNEVRT2c3MTZRRjcwcUZ6RCtxUUlDCklRQ3ljeU9DcTExTlV6cWdEQUZiU0FPY2NrTWUyQlpsc1lVMmVLNDFVdVQxdFE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-155.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T13:58:49Z" lastUpdateTime: "2026-07-09T13:58:49Z" message: Auto-approved CSR "csr-r4xvc" reason: AutoApproved status: "True" type: Approved