--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T14:56:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T14:56:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-24T14:56:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-24T14:56:35Z" name: csr-xmcbf resourceVersion: "6746" uid: d873fa98-a41a-42b6-85cc-646493d6ea3d spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f7efdbaf06bfd397dc6add3dd0299c6ad628add6a643e593b6cb73dce0e8c6d7 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamt0TWpNeUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQlBlazNCdXBmdHdTVUhmVjZoMEM2aGVjdGFwSlVJN3kKMVUyQ2xzaEI0N1B3TzM1VC9vdnVqVUY2aGdhQU9lcmRGZExGZkhwZ1hFOVZwRUhjTXNRRFREbWdBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlFQXJBd1BWRnZWdHpoTVZRVWVXang5SDBHWUJKL0djWmd6Nm1FMnBxYjF2Y1VDCklIZzA5a2p6ZzJWam9SRE85QmM0S21wSUowcElETUdyb1Z5eGRVTWMvUmJGCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-232.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T14:56:35Z" lastUpdateTime: "2026-07-24T14:56:35Z" message: Auto-approved CSR "csr-xmcbf" reason: AutoApproved status: "True" type: Approved