--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:44:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:44:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-16T18:44:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-16T18:44:50Z" name: csr-kg9wl resourceVersion: "6251" uid: d34f0085-f484-4aa5-bb3b-565fe9153560 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ed36dcb276899fb2e6582b590ba62a3969d1bd6b1c16a71bd638620cf125b850 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-37.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRQVMycEVDU2dWazRuVjlPOTFOc1J5REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UWXhPRE01TlRCYUZ3MHlOakE1TVRjeE9ETTVOVEJhTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTnkwek55NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVN6c1FHcApXVG1WSmx5dGhpbkJsN2lVTzNSUG5wZ0g1MFp5cGhkbHg3MmxjejJSMzBmOHJFemVFWG5HRXBQUit3a1o3cGVkCnNYRkIrTGlYTHlOK3p0V3pvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRSlRMYVFHb2JINmNUbVN5QW4wawpTTTFXczNwUzd0NFo4Tkxxb2FSOGs5QVlvemZqYXU5aVhxKytoaHAvampXMWtZbzhiTitic2Z5dW9yYzgvQ2wvCi9sUXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBSzY5WU5DN1VjdUU2Y2pNY2FaelNxc1Q2WUg4Rlc2K0o2YU8Kbmx4WTE2TTFsZHZkMlM4S3ZNSFZ2cWNHcERVK09WUDJVSkwvTzZicVNVSW91NEI4a2Z6ZzBTSVlndWxnTmdmVApKTXd3cGRINFhTenZPc1AvMlVTWlJHb2YrOHlzUlRlTjFBajBMa0I1VGFaOUJucmpnK2w4aVFwZ3JxSzRwdWNPClp2eXBSVzlFaHJEWFFNcm1YdStMSW1rcGY0ZzhoYTZjVGJRL25COUNERjUxUjZLZ3puTUpUVUFvdHJRMFhwcXMKeWU2SmRwRUhNVHVtRW1pa2UydDA3SWx4TzR2SzRuRDJnZU15VjBQVEt0cUluSDBMbG9vWWV3dGUrS3dlU2pkbApSbFQrTHlheWJoVVdoVFU2T28yVkpJa2JvdjhrZEdib3FJVENXNXg3UmZONk82NUNjbEE9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-16T18:44:50Z" lastUpdateTime: "2026-09-16T18:44:50Z" message: Auto-approved CSR "csr-kg9wl" reason: AutoApproved status: "True" type: Approved