--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T16:51:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T16:51:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T16:51:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T16:51:47Z" name: csr-swl9z resourceVersion: "8100" uid: 0481aa09-bbff-484d-9d6f-9a7897023272 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=62f2ed03722fc7bdf01fcc8268aafbfef6640719be8b43f927f2164e6ec2fb16 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamd0TXpRdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFYUo0TVRaYy95c3IyYkVCZUE3cVpEWERKeVA3N3hNRjYKNllxL2JabC93V3BWRmRySzh3SStkNnFMb2NSdDVnVUNxVVVKbjN6NXpQeXV1aDlIT2ZmcWxxQUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwZ0FNRVVDSURSeUhINDRuZWRHM3pQdjhsVHc5RUs1NWZtZXpLUmVMbXBCLzMrVWR1cXpBaUVBCjkyOS9TTjZxRTY2YlRHZlVyU2RnbjZSWGxERFRyV1R4dlRRWTlJcTNKeDQ9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-34.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T16:51:29Z" lastUpdateTime: "2026-07-09T16:51:29Z" message: Auto-approved CSR "csr-swl9z" reason: AutoApproved status: "True" type: Approved