--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T17:41:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T17:41:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-17T17:41:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-17T17:41:33Z" name: csr-8c9h2 resourceVersion: "6833" uid: d24a8586-688f-46c7-9989-f88ad6cf4c1d spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=13a9bef9b0244e616612a84f7abb99c11c5fc3b12fb33bbc66cdca56a0011fc2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-16.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQUk1ZklEcW1kQ21LOE9VYUVFSVNubHd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RTNNVGN6TmpNeldoY05Nall3TnpFNE1UY3pOak16V2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRNdE1UWXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFdE5JegptTndlb2pERml6L2h1U1V0MHZ4TGNuTWI2V0NSV3pxY0FvUDhIRjZML3U0OXVkelZaTXMyZ0dHVzIvc3RBRlRhClhwWWRLY3dDa05XQmtPZlVGYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNDd2JCZzJ2NGE1NjRlT2p1VgpEY01XWnJUR3BQR2lUbEUyc0pUaU85U2tJeXhKNnBUNEVRSVo5Qi9vZ0tSZTRxSE9xdGE0R3ZCRWx6MmJoSlpuCmo2QXdNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJSMWxQQkc0endJNVJmN01VK0JGWmFoRlJmWGJCb1Y5YjYKWWZFUkoxN2Npc0REaHlyYk1vb0hUU2FScW5STktIK2FIRldzaHZobGVpM2V0Y1I0Qlg1MnNOeDZZejM2SnBETgp3TVNWNkQraUwxQldiZFJTdzRkU0hoTkdxZVNsQnNzczczc3B1b0tLanFqNjZTenpkU25nekRDL2s5bk03dzAyCnpYZkQ5QkpjcEtNMy9reVpXUnJndk0wN3Bac3NvdmhWWWZ6ZG1QRHE5MDR1d3JKd0hYQ3JlYStzRWdTOTIvYjAKMitBcmFjd3MxdWwyTGIwUytTa2ZIY1duTUhmNHZOMVhTTkV1REpwWW96LzA1MEIzYloxUFNiRlpxRDVYRXNXUwp0YWUvY0JTTXpsRkNqaFVCSVBMYlA5QSsrNHhEK0E2aWJLQTUvR1F0L2ptOEM4Uy8vK2FDCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-17T17:41:33Z" lastUpdateTime: "2026-07-17T17:41:33Z" message: Auto-approved CSR "csr-8c9h2" reason: AutoApproved status: "True" type: Approved