--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T15:32:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T15:32:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T15:32:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T15:32:29Z" name: csr-xw29k resourceVersion: "6392" uid: 4ba814cf-72ad-4124-aa44-5c7c7995a302 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9468ad0637f8e8f355b4538730a7455aae297fb7b502e86da745f9a649b80fd4 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNell0TVRJeUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkQ5c0JkVzdhQ25zVVJvS3pONnFQZFYwQXNOa0tiNDQKdW0zZUZqZ2E5bEtjREZ5aXdOQmxXYlBIWnZKQUh5N043UFJxenhNTDEvVTdkUkdIc09RcHZmeWdBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCeEQ1Y3JIblhVNGdEaHpHNmFCbjVNbXF1M08wYitDaHV0RFVRaGNwVm5UZ0lnCmV0UVE2UXBqMHQ2TFpCbjQxM2laRVF3aXcyeTNmWkZVNStYeHV0bWZUVzA9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-122.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T15:32:29Z" lastUpdateTime: "2026-09-10T15:32:29Z" message: Auto-approved CSR "csr-xw29k" reason: AutoApproved status: "True" type: Approved