--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T16:04:06Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T16:04:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-20T16:04:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-20T16:04:06Z" name: csr-j5ctm resourceVersion: "6572" uid: 6907ede9-058e-4874-bda6-05756bd01720 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f52309bd2a6ef4164971d92f4cc4945cabfc77664c04d4e4b2a675fc07b9f1bb groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhORE10TWpVeExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkg3K3lKN0x1d3hFZ1BDc1Y0SnVVS001TXFpak8xT2MKbkwrV01hL0ZmTWIzbFl3NXdDSGxwamJsbml4OEZPTzNZaVZEaUdHOUJyd2JYNUhycjBKdjAzK2dBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlCbFM5cUZKVkJ0YzQrUmEwbjlWUzF1S0I3eVRRaDBReVBySC9BbFdIVThJUUloCkFPSWVSSldubHNWbjJDcE9KVXFQcXJFcVFiTGxNZUd3NUJ2SGJDcXlhYmJBCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-251.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T16:04:06Z" lastUpdateTime: "2026-07-20T16:04:06Z" message: Auto-approved CSR "csr-j5ctm" reason: AutoApproved status: "True" type: Approved