---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-10T12:09:54Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: ovnkube
    operation: Update
    time: "2026-09-10T12:09:54Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ovnkube-identity
    operation: Update
    subresource: approval
    time: "2026-09-10T12:09:54Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-10T12:10:07Z"
  name: csr-rf2hk
  resourceVersion: "7612"
  uid: 4f9ea3d3-a66e-4451-8722-8c936502753b
spec:
  expirationSeconds: 86400
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=3879add01bae70342635218990c49d4b93915cce48c7bf06bdb28229080d6df6
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  usages:
  - digital signature
  - client auth
  username: system:node:ip-10-0-142-28.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-10T12:09:54Z"
    lastUpdateTime: "2026-09-10T12:09:54Z"
    message: Auto-approved CSR "csr-rf2hk"
    reason: AutoApproved
    status: "True"
    type: Approved