--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T08:12:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T08:12:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-28T08:12:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-28T08:12:25Z" name: csr-rnxqh resourceVersion: "6353" uid: 15b18c6d-351e-4325-9cd4-f73f5a19b514 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=458c19e03c91d186d7e76c96ed22e50d9b76c2127864ec786fbee04cf8ed5321 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-172.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRZERPNWV0R2M0UnZhNGJaWlI1QmlaREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qZ3dPREEzTWpWYUZ3MHlOakExTWprd09EQTNNalZhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTXkweE56SXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFUk1UbApmVXdJWUs1Wkw0MUpSWW91WVpDY1ZsS0NDVWxpNzR0ZEh2bVFKQlBBT09Jd2k0M05lWDNQbWNtRWNUZFl6aDJXCjF4WlU3WHhkZk5GQmJSZFRBS09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUI4N2NmSWdHOTJUUkdBTVplawozZUwwdSt3eVAwQWZVNnU1WkRsaGNQTFZ1WFpZZWhQdSt3NGMrRUJRU1BPb2xqT0VpUTlSOW0xY1BVZFJreGJICnMwS1ZNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJoS3B0VXFXOThORVFiNjUrenByWTB4NjJOTGlFUnc2TnUKazhTSDN6bmJ0WStBWkRLQ3dkNFlobEJCWTAzeTBMM21JeU14M1h5S2luWlFTRUhMN1FFQ0p3eG9QQlRUcWxhWgovTUY5bVl0UnkwdGd0YlBEWnJDNlFuWHN1dTUyL1I0NlMwdUpVdlBEM0NCcHJtVVlrcHV1U29xcC9WY1BLMTdBCkZSMjl4UXNaSU9vKzlLNmdyTTNOdkZOTWw1VitEcnBqUmFxRnJkdklVY0dqWE81MXZhODdaTEhoVlFiMW5Nb3YKT2piaHhkOWNzd08yUy9IZkpzT1N3WGx3ektSN2NrUU9ReHpWdG1NN2FHWkdJczZIZ00zU3Q5SkxuSkh0NVdlbAp4aThYZUpoVFVaYXFwbVVUTysyd0ZvVkhKeEtBTTIvWkVuNjJPQW45cjFXelZwUjM5Zkd1Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-05-28T08:12:25Z" lastUpdateTime: "2026-05-28T08:12:25Z" message: Auto-approved CSR "csr-rnxqh" reason: AutoApproved status: "True" type: Approved