--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T13:15:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T13:15:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T13:15:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T13:15:19Z" name: csr-754m9 resourceVersion: "7709" uid: a3a311a5-1043-425f-aa3e-baf44446362c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=99bd1254752aae49c0fcca57502e70785031ab99bcd9af3ebcdf4af2eecd0f4a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-247.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRUHFlM3BSNkZLVHpjc3lJZVIxY0xxekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UY3hNekV3TVRsYUZ3MHlOakE1TVRneE16RXdNVGxhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTXkweU5EY3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFdDhldwpOM3NpWUhJazZKemtKL1BOa1Z4cmJTaldUMCtBQWdSZUowdUYwL2VyTXVxYWw4aGl0ajEvbUI3N2htNjJMOEVVCm50SHJwVmt6aVorbXo1SWlCS09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUQwM3IzRXZZMjdPUnhkOXd4YgpxL0FRWHZ2ZXdaY2xtc0dYREdKVVNOT2xiaXdmRUxHUHlVWnVXeW5OUnZzU0pBNUZQTXk1RWZ4WEhHa2ZOSU9wCmVRM1dNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUEydXJ6SWhiZG9qT1NQSGRick5qYkU0cE1RckN1NmtsRnUKT1NCcWRGLzJKQ3NEOHdPelBHUXAyUXZUR3poa3VERlErSm16Z1VsMEFkcFlubmF0VmFJWFBsUzZsbG5OMHpLZApRUDlZaGRuY0xlSDVCRmtJQm5PeU9nT3c1ZUNKOSthL1IraVYyTUVXSXRseXFWcXpheWZ2bmJIUmovVE9yOWxQCnIwQWh4c1hYaWk2Nlp3bCswSGhiOTZPWm11N043QmV4MTIyWE1Pb0JkaVhJRkU4MnJYMUh6bVpHc0VmSEo1RFcKWEdNVnJPUkN1aEwrSnRnNlBxM3d0MWRGbWo3TVVhNzg5V0dmUTh6c2NzUTBsZWNKOWg2bk9iZTRLMjFqQjFETQo4SDlHNlNySklicFZHcEtoMTJKRE5CZnJ6Q2NTNU5DQnFoVUhXMm5RUnc2S2JhdEpXWU9JCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-17T13:15:16Z" lastUpdateTime: "2026-09-17T13:15:16Z" message: Auto-approved CSR "csr-754m9" reason: AutoApproved status: "True" type: Approved