--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T16:56:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T16:56:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-07T16:56:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-07T16:56:50Z" name: csr-km4gq resourceVersion: "6684" uid: c62821c1-1ff6-4200-9e3e-ea4360a8ef52 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=280e1befef011e8df0081400ed9219e5da0dd6971f25b53f8f9b91f3b4c5bc21 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNekV0T0RRdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFU0Q1ODdQWkFtNDhEWWlOOC9DTDlkTWQ3dHArS3Y1akEKdDVmeGwrV3Y2LytWMUVqTjZnRVcrdy91bkFDc0xrd0ZuVzNHdlh5MjdjSFh6OUhpbGRBUktxQUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwZ0FNRVVDSUdnWnU0NHZ1c1EwSHo1OGdVM0lsbCtkMDdyZWdlbENSVW5GUGlsT015cktBaUVBCmdzUWxYaGRNUWttRVN6azNIdEdVMS9NZVIwSHAzRXlwV2kwWWtndFhtTlE9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-84.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T16:56:50Z" lastUpdateTime: "2026-09-07T16:56:50Z" message: Auto-approved CSR "csr-km4gq" reason: AutoApproved status: "True" type: Approved