--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-05T21:05:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-05T21:05:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-05T21:05:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-05T21:05:39Z" name: csr-4bkl2 resourceVersion: "6799" uid: 8309b6db-2560-4ac2-a436-e7b3baf30ed4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=17683e569aac8ef555959663f9cf1d4d06a3503a54a59118b1dcb16f4074d942 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamd0TXpjdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFZDNLSEVzYmRMNWlWWUpoN0xDaGgwOWVabzNrUk5zT3MKa3FoSG1mUDFoTFdWYmlnY3hoTnArd3VmWlFiVDAyU3VxT0U0ajZIcldMeVZ6c3RXbm9zZWo2QUFNQW9HQ0NxRwpTTTQ5QkFNQ0Ewa0FNRVlDSVFEc3Y3OXU5d1RRVk16bnBxWVA1TWg3dHRVRXdpME5VMkJnZkNoTGtDNDdwd0loCkFPZkhUbVZreGkzaXpBOUt3N1JJQTB6LzNjeW9td2taTFh0R05NeGxjQWFoCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-37.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-05T21:05:39Z" lastUpdateTime: "2026-06-05T21:05:39Z" message: Auto-approved CSR "csr-4bkl2" reason: AutoApproved status: "True" type: Approved