---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-03-18T13:06:17Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-03-18T13:06:17Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-03-18T13:06:23Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: oc
    operation: Update
    subresource: approval
    time: "2026-03-18T13:06:23Z"
  name: csr-bbfgx
  resourceVersion: "2687"
  uid: d8e8d765-e4e2-4e66-88ac-95f8f28823f7
spec:
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kubelet-serving
  usages:
  - digital signature
  - server auth
  username: system:node:master-0
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-03-18T13:06:23Z"
    lastUpdateTime: "2026-03-18T13:06:23Z"
    message: This CSR was approved by kubectl certificate approve.
    reason: KubectlApprove
    status: "True"
    type: Approved