--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T23:52:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-12T23:52:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-12T23:52:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T23:52:30Z" name: csr-5xht2 resourceVersion: "7659" uid: ae29181e-963c-4534-a8c0-a1f360fc5a47 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6c2d541fdb1500f900013393a35d48e5ac9db3edb85dd974b4cc15bca374c43e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-128.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRTUIvbS9RMUZPeTBaOXJnSEhFUE1VakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01USXlNelEzTXpCYUZ3MHlOakEzTVRNeU16UTNNekJhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTUMweE1qZ3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFQmtHOApldHdwWHdpKzAyclV3REJIV2FxaFRZZUJIYmhkcHJsUkxkTzkxYlYrS3I5a1JoWURUamN4Qi91dVdkdk1ZVmtTCkdoVlcvN25CRG1HVkI1d0JpNk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFBUzRVRDRNRkhVOVZZNG96Ygo4RWttL2x5Kzd0SG9vbGMyMVdBU1JGSVNLbENNSEZCd0t3ZjlyUkVDMEJwekFWbUpMVWdrTUFhZGpubGY2Y3liCnphejFNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUMzOXJCajRwSE4zRWN3ejVoN1FxQmpxWjdaNW8vNVJJSWQKSXowYnhlOGpkYmVpNUk5Y2dPSFJhSFByai9ZMkdlaS8wZkpmM053eEJwMUJja1JNNFJ6UXJwTnZoL2Vra3NFVwpnb2ZIb2xGek9rajFrclNSR21zclRlK1NlbVFiMWdmcFZHczVuMlRqOUJUMXV4ZGc5NTJkYzdCSlVRZ0t5MzI4CkxsRkdiZlFwbHlCOThXUGNXc2JLaEd1R2NBUVMxY1M1R3FsMGx4TFlkYXV1Q0xxb3ZkdUJjWDRadDZvRzBuSkIKdENLTzZOL2h2Q2xnUjRhZThuL2hyZ3RlKzJTaE1GR0hzSFkxWWlrdlFKNVB5bXJqT21ZQ1VyczZHZG51K0tEUgpESlQ1bEtyTXphRDdkR2tSYnAyUGgySFdDcE5oOENMZ1hrYUZHSW9YWm00TldHSFpUVndtCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-12T23:52:20Z" lastUpdateTime: "2026-07-12T23:52:20Z" message: Auto-approved CSR "csr-5xht2" reason: AutoApproved status: "True" type: Approved