--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T17:08:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T17:08:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-21T17:08:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T17:08:54Z" name: csr-4j5l5 resourceVersion: "7285" uid: b1ed6e66-2b97-425a-8d0a-b763cdeab66c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4909009939ea09d826da2a76c91a1315fcccb12b794d639db4c3c30d7341b2da groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREV0TXprdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFQURLMWhNK0o2L2c4ZnpYcTJHSUo4K2lDL0dlSnJHSUsKN0t4TUFYSTk5TkszQ21FVVlTVnVxbDhEelZ6ODIwZCszSFd0Ulo0cnlVTnVORmZuTHNDWHdhQUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwZ0FNRVVDSVFDamJVNWtIcFg0SGtabHczaU9Gbit1dFdUMjQ4WUtZdjU5b0FNdGhzL0lRQUlnClJwRzg0azNzNzdFSThiQXBZdGlpOHhWZ3dlYW1zZlZGTzU0NUw0d3FTTkU9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-39.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T17:08:54Z" lastUpdateTime: "2026-07-21T17:08:54Z" message: Auto-approved CSR "csr-4j5l5" reason: AutoApproved status: "True" type: Approved