--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T20:03:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-03T20:03:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-03T20:03:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T20:03:52Z" name: csr-8zv7f resourceVersion: "6784" uid: 44ce537b-c310-4b43-aaa0-d25131b6d87e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a7f53459abed52a4684642c1db52845f5de9846032922a598a2c5279b571a183 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-4.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3VENDQWFtZ0F3SUJBZ0lRVmRNalpRNWoyUk5EK0ErTDFkNFZrakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ETXhPVFU0TlRKYUZ3MHlOakV4TURReE9UVTROVEphTUZBeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhNekF4QmdOVkJBTVRLbk41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTWkwMExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCRkVJcWJkMgppdDZUVkxWWVN6RFZ3ZmI5eWx5RmJmNWxCcGY0MTV5eG9pd2NXQ2MyYktJb2hOejh4ZFF3eGNEeGpkMFhKcFJDClVwNzFndTBwUm5tMzZmcWpnWU13Z1lBd0RnWURWUjBQQVFIL0JBUURBZ2VBTUJNR0ExVWRKUVFNTUFvR0NDc0cKQVFVRkJ3TUNNQXdHQTFVZEV3RUIvd1FDTUFBd1N3WURWUjBqQkVRd1FvQkFPdUx6ckNES3NBcTFWRHVaM0pPWApHTDFrdTZuQmZ0SktiQk5QclFJNFN0MUJNV3lYODhHRTJ4NUFETURWWU4ycFUwU00xTnA3Rk10VXA5UEpCSkhLCjdEQU5CZ2txaGtpRzl3MEJBUXNGQUFPQ0FRRUFXZVNmSExQQWRUTXlYWHVPQnJvRGdmMUg5ZEdKbmpEMFFvWUIKUnQxL25QRUZ5V3FGTzU2dU5QczNocFB6dE9VaHl4MlZGbXJMYTE1OWlYTUZjVEdwTEJvMDJCaWpUa2ZNbGVNZQpzb0hheUVrMW1TNlM3bXV1U2lBdUdMMlF5b0o4bWFkWmd6ZUJaSllhYkEyb254U0VMRGtlbFBwL0Zod284Nk9VCjM2MDhXSzRtdWtRMmk5dHNUTDVYNldLdGlmVFZ6VjVCd1hEUUxLdVZPRG15OHRyaGVsbDRQM3lWNlpEMGRQa1AKQk5aZzdXMk5QbFNMdkxGMldSVHpTdUxicFdkRm1KNkhVMDVxL3dnc3BYaHdCSlllZ3lYNVk2NUxOeS9wQ285bgpPMDRySnp4WjA5TTZEY21MblIxYU5CK0VBQnBVUzhQM3lDZjMxNXp2Q1JyNjdqU2YxZz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-11-03T20:03:35Z" lastUpdateTime: "2026-11-03T20:03:35Z" message: Auto-approved CSR "csr-8zv7f" reason: AutoApproved status: "True" type: Approved