--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T09:43:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T09:43:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-09T09:43:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-09T09:43:25Z" name: csr-wm67k resourceVersion: "6918" uid: 49e915bb-64f8-4ef2-a116-7c49aee701be spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9672c2c87038edfa306bb109f0668fb90a33d7009c3a0a1b492be400ecdc75b3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-228.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU1MOEpUZUtIR2xYcVdvRGk4d1Axekl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09UQTVNRGt6T0RJMVdoY05Nall3T1RFd01Ea3pPREkxV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRNdE1qSTRMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkM2QQo1MncwUW1zT3dRaWZnWHNWT0xlOHdSeEczV1BnZC8rTjVTa1JiR3l1NE5pbEV1Qlh0S1M3TzBQOTlpYkpWOThxCk9hbGkzeWxjNTNzcm0xOWxsT3lqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBb0FHaUJwbWgzMjNWZDlyUgovQ3NIV1IzS0Fhbzh3Z1ZiR3FWeXg5bnViSVRlRGR4Z1hzd29Zd2hHcS80WTFOYitkWks2eWk5RzVId0NLRnFXCmhPaGd1ekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBR2twZ25DN0s0TERkNUh4NTR2NVQyeFp0UEJMbWJKNTgKVEkzN1gzSHUyKzgxeHEvUDNPYmkzdVd3SUl4blBkRnZHb05XQ0MzdjFLakljTG1nQmt0d2p6OUN4TWZKZHdtNApsK2JVK3RHc0R1VlBkbVJSS1FmYit0T09BdHYyUmMwQWFsVUM0YXFkVDM1OUJ6N3U4a0tSRXlnL29IUkV2SFNxCjNvUTJabjY4VFFlUkJzbW8xcU1nODB1aEovU3djS1hiVjgxQ2hSV1Z3RWVmVGV4eHdHNWZpTU9MdzRiQzgyV1YKMzEvZ0lUbTBZQmpXeksvWUF3K29JWHB1QlUzbU9qZ1g1dlJHTE1zV3VHanFndnNORGZMTmtzSXZyT00ySEZmRApoUSszL0JHVHNXMVl3QzNJSk9weklnc1U2TlY4S1JETkQzdEk3RjRWaE1uMDBNMjNuanNtUmc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-09T09:43:25Z" lastUpdateTime: "2026-09-09T09:43:25Z" message: Auto-approved CSR "csr-wm67k" reason: AutoApproved status: "True" type: Approved