--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T14:11:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-09T14:11:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-09T14:11:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T14:11:47Z" name: csr-jhctk resourceVersion: "8034" uid: 1d8fe8bb-7e08-4135-8abb-3588595324af spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b4770b6b4cf50a1ddbac36cd44540ca6c392a90342b574c4fa742ed4042dccd3 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemt0TWpVeExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkY1OWR2RzRpcUhmSGtmSWcwa1FPRUNGVlNQcjBtNDMKZTZ1eEQ0QXpoOExGQmZ2dGp2VDZ0UHFhR3VVdkk0ZUZYdnMrRml5N3hxYjN0UktjRzhtYkJMT2dBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlFQTMyeU5zYkVuNmxLU1lVVjltN1dXMFJqeHZBak5ObGhIMlkrR051YncvV3NDCklDVHlDUE5UMjNpdEMwa3B2SmtrNmhaSzlGdHAvcWIvYUl0NEFUdU1LVC9tCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-251.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T14:11:32Z" lastUpdateTime: "2026-09-09T14:11:32Z" message: Auto-approved CSR "csr-jhctk" reason: AutoApproved status: "True" type: Approved