--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-01T20:34:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-01T20:34:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-01T20:34:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-01T20:34:56Z" name: csr-nkjnd resourceVersion: "7044" uid: dae0f760-8643-424f-bc37-3bbbf41075bb spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=1a726f5489db68b30b43c47b5d4300d4d705e6edcf8037521f3f4f5e82bd74ab groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNelF0TVRNNUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQks4c1poRHdFV1B3cm9CNzhWck5IdWpLOTJvM3JhOU0KMVh5d1JrTVZvTTFDSDdURG91WTNmcVFaWFF2RFNwQnBDUlNEYWFWN244SmVUa2tWaUkvbkxqbWdBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlCMUhTT25HNkpGbGpGZXMzN0VUay9vTzd3WmxHNVJib0xlZEhqa1JYSzM5UUloCkFOTVIvK0pJcTA3UmQ2WkFTZUNtMk5DNlNzMGx3cXJLMENyVmxRK3dSYVkrCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-139.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-01T20:34:56Z" lastUpdateTime: "2026-06-01T20:34:56Z" message: Auto-approved CSR "csr-nkjnd" reason: AutoApproved status: "True" type: Approved