--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T14:54:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-14T14:54:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-14T14:54:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T14:55:16Z" name: csr-2fxjw resourceVersion: "8100" uid: ad3e0b06-8c83-4294-8e4c-91af048a5f35 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6be818886ac1c254448a82168bb77bbba4a3c197878907a5851cbd8c95eff235 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-217.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUt0SUd6MUR3S2FxVWlBRjJZKzBIQUV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RTBNVFExTURFMldoY05Nall3TnpFMU1UUTFNREUyV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpjdE1qRTNMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkVBUwp0bGIzZEdsR0swdFZ4cFNXa3JsOUs0UVBoaG1CNzZlVXZaUXRidm9qUU1qbXpWdWZrYnV5VzIySkJpRWduc2x4CkpyTFFjbHlDbVRWZVR2dnlhclNqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBWFRrMXZlYVprSVE3bzdhbwpIcWs0eTJ1M0FFSlpzaGRDbWxIa25LTCt2NDhYUDBhQmkvTmhiUldaUWZkMzkyeTZkaFg4M1pEbWwyeDUyeEtyCkZWcXk2REFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBSFltVG9DSkpLOVJ0bVVkRXlEK25CZFNPTGswN1VQWVIKVmdtNXUxZXRRcmozelIyYVpnSHMvUUl5MWQ1bGhUSk5yNVlKRjJwRDV6Tk5BVUNTdC9JazQwbzVqK0YwTE5DTApqVnhVb2xLNXJPM2VZUURNYmtDSnhKNTVHcVJxaXpTV24vT0ZiUEFZM3Mwc3Y1cU5WRkw4Nk9NdjBFSUpibU5iCmRkRHlLWDRlN2pmQWNpR0x5WVlialkwY3FXY01vZzVJVTA1c05DcmdBcGxPTzBzTm1RV0g3cnNTdTh0OWlYbk0KMWl3RkxpSWV5VVZGSEtEOWZuaXpSaDBXNU55NjF6WVFnUXJWd2JRSjcrOFZ3ZnE3aTFiekZ4QysvR2kxSkcyVApSN2Y5SHBvVXBiNGxYdzJOamc1TmNTSkVORzVkZFF0OUkxSHp1YmM5cGdyY2xrZUZ5eVZ6T3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-14T14:54:55Z" lastUpdateTime: "2026-07-14T14:54:55Z" message: Auto-approved CSR "csr-2fxjw" reason: AutoApproved status: "True" type: Approved