--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T07:51:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-30T07:51:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-30T07:51:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T07:51:13Z" name: csr-9lkhk resourceVersion: "6895" uid: fe349315-e434-4a9a-a74a-c7c0dabc1fa5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=029c07e540aa50ad7c24fae6c57be238d383dc8fd136bd53236121920d4484be groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-231.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRUHBLeGdyMnBqeXVEcjZHS3RKSmV5akFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM016QXdOelEyTVROYUZ3MHlOakEzTXpFd056UTJNVE5hTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURTAKTXkweU16RXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFUzZYYQp1blVEcThySFlVcG9wa2hkVExSWnZHU2Qya1NYTkE0dU5QOWU4ZC9QY0tnTGEyT3p3NDBQYTgrb2hhZ21UM2IxCndGYmdUYjkrb01KYmRQZExBcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNlZXY1WDhnOEM2Q2lENTkyUApSc05LMXN1eElUSngxekp1c29RMmJwQjF4clNjckp5R0R5Y1hYWmdjNVEweWpCd0U2ZFNreEQzUzhNMURmM1p1CldtdkZNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNLWkx3eVEycWMrZUpSZTBSRlAwZlBYOTlmMDJXUmZOenoKdXVRdzIweEVwL3RiOXgzMkZ5K2tVQlRFQk13dEYyYnF1UlJPbWlYVk1MRXJPZW95ZC9LZ3d4aGpkbmRHUEgzQQovZE1Ya0lyZGhnK2JBTEI5aVJsMUR5T1drNlZHVGNvaUFUaVN0SEpOeWtPTGxuNlZwcWk5aU8wUXVlNVlDTEdLClBJY2o0emwyb0xlZ25haVR1TjNVQlVPV1RYVTF2Q0xROHEweFJlRVFKNkt4YUl2V3dzZEIzTFhlWW9KRjBEYmgKdFZPMkwwMXJvSVBjT2hDNVFjZ1lOZjlGMnBqd0xUT3NVbmJyc2R1ck5DV09ZTklwYlhIWSttVnBXUjZLc014egpXOFp6NXVVUzJDU0puNTBCNVB6bHEwanZKdHV5eUtnTXRSajJqVnFTQ0FZQW5Ba2dxYll0Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-30T07:51:12Z" lastUpdateTime: "2026-07-30T07:51:12Z" message: Auto-approved CSR "csr-9lkhk" reason: AutoApproved status: "True" type: Approved