--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T15:26:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-02T15:26:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T15:26:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T15:27:10Z" name: csr-r7w2r resourceVersion: "7907" uid: 6785fb84-6bcf-43f2-876e-bf359fe29ff4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5cd6589174e0d65634aa457537b9587bc27c9b68f70160fe4fcc98eb04515982 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNelV0TVRFekxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk1LVU9KUzNpVlVpM3VQcVFoV1l0UDZOMCtEREE2T2MKSG5uTld3RFJEWHFQRzVDZXcvMklOK0Q0UmVzU0lOTUNQUjhmbW4vRzYxMTlJNGtQbUkrSktOYWdBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCeTBqSmpHL0dVRElrUStyb3g4S1kzSjQ4Tnp3Z3dnUDAzbjhQcWs2ZldXQUlnClRJbFpKU0h5MFlCT3hJVVUxVVlpNFBOSyttZXR2ck5SRy9ISHNTWlFjVEk9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-113.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T15:26:56Z" lastUpdateTime: "2026-07-02T15:26:56Z" message: Auto-approved CSR "csr-r7w2r" reason: AutoApproved status: "True" type: Approved