--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T10:20:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T10:20:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-29T10:20:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-29T10:20:39Z" name: csr-tzhd4 resourceVersion: "7215" uid: 65fc7671-24aa-4e76-a540-37d99e2a1692 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=efd243158f57a068c7daf58c22e8d7adbbc1448b96d2bc3c1c2735827bb4e668 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemN0TVRRNExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk5MQzB2Um12cXo2Slp4bk5HZEVTMkxoc0J3TExjd3QKTVNRS29tQ2NSc1o4SFYxTnlkby8rQjVaajlQUG92Nks0L0V4Y3NsWjkzNEh3ZnJocVpweXlqMmdBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlBOUYxR2V3UGNESStsL2luU2VzL2dQMmVxcHJoNGY1SG1HcVNabmZtcldSZ0loCkFQODhvazQxbUNzV0ZZaGd6bXFzZmRQNU5RTGFNVnROanRnajVCa2ZHOGRpCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-148.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T10:20:39Z" lastUpdateTime: "2026-07-29T10:20:39Z" message: Auto-approved CSR "csr-tzhd4" reason: AutoApproved status: "True" type: Approved