--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T07:35:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T07:35:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T07:35:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T07:35:49Z" name: csr-ds22p resourceVersion: "6806" uid: 949e7a74-508b-4efc-9ba9-7ca41a3ead2c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=061e32ba19b8d5339f5f25005262b330a8b217f0344d495aecb670638f5f2f2a groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNell0TVRFNExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk1NSU9iZWhMd0hjckRNWWppRUxhamtCU1Q4TXFGL1UKc2lEZkNDMTdZa3lZYzludEhaWlVRa2pOR0lpM0JQYkIxUUtjejVETUFoVkNTTFlwK1pvRS9HR2dBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlFQXA3RmJuWjNJdnRtMVlQemluNmhWZG9ZN3g5N1E3RzNjMFgwQVlMcEFyUDBDCklGOXhseTloUTZqcmJ2Q1ZJeml4MW1Va3FFb0JZZ0Ntc0dPdlJwSWwzd3lnCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-118.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T07:35:49Z" lastUpdateTime: "2026-09-17T07:35:49Z" message: Auto-approved CSR "csr-ds22p" reason: AutoApproved status: "True" type: Approved