--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-12T19:22:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-12T19:22:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-12T19:22:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-12T19:22:38Z" name: csr-42fhk resourceVersion: "6635" uid: 9d156ad4-70c0-420a-8c68-595c6765cd4c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3644f61ac6b8ad181494fe2673d2ffc3ffa80ad0531ad0e9f75532b89a976925 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-108.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRYUxhMkdtRi8wVHpFT1F5S0crNlNkakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1USXhPVEUzTXpoYUZ3MHlOakEyTVRNeE9URTNNemhhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTVMweE1EZ3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFaDYyUQowNjc5NDQ0c0JUOTJCNkpCR3dFMUJBZHBQLzRxaC9FeklRd3FZUXVpQ1RyRHdqQjUwb09qUnAzbkdpaFRqc2FrCjhoTWtSQlB5MWZsUjZUYWh2S09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJLZU1OQWlTdlJ5NXpIVjYvTQphdkxPZ1ROMTNiQ05aM1FnWHpKamd1RFN6R0txUHdRQmRkV3hGVjNSMEQyMkE3WHRqZFhhK05KOCt3WDRIMnA2CllJMUtNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJrQUNFazNNT1NTR2wwMGp0TGVsRFlDSkdvMlZSVVV1QXgKL2lCV1d2NXorK3lyMC9RQzZZYVZrR0t4Ny9xSFRtMmhiK1B0WHFnWGx5QU5nUTR2bzltZEY5Z2hnSlpadEg3cgpFazY1YVpKZks5czEydUc4ejdUa0JaMHk4azRTVld6Z0JBdGZHTGI0czVZY1dMaE1KR1FKR0xxOEkwZEhUOEYrCisrMjdaWE90VU1DK2I0UllmZ3BxaXRRVmY4YUlGZVREYm9zRExRU3dIRTMxekhlK09tUFg4WlI3K0dTNWhyUUQKdmdLb3FqeTBRd1p3Ly9xU1BJaWhoK0YwQjRJZU5FbklEaDJnTHFLNGFJVU54WjUvU1dXMVZpcGY1LzJpaDN6cwpuSlBDS3JJOCs0aUIxV21uMlRHVmt1Nm13Z1Fyc21NTzJKOStzVlYzTnNuVm1Da25kRmFICi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-12T19:22:38Z" lastUpdateTime: "2026-06-12T19:22:38Z" message: Auto-approved CSR "csr-42fhk" reason: AutoApproved status: "True" type: Approved