--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T10:29:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T10:29:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-29T10:29:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-29T10:29:27Z" name: csr-cgb8x resourceVersion: "7215" uid: 7de352cb-b951-45e4-8a4b-f2994a02360f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2d43825ef2fbbab3bef7b48fd90a8733c3151180d64f8d2645f327674a2dd7b8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-43.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRRENRSGs4ZjVBSjAzbFBoTGNGa3BzREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qa3hNREkwTWpkYUZ3MHlOakEzTXpBeE1ESTBNamRhTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKT0MwME15NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVN3eHJHWgorMnVIeFVkRUpiQVc2S21Ga2VqL1lsRXA3OHJHbGk1UE1SSzduL1hKS2VqSWM1OE1YQS9xVDQwV1JQUmFmRjBlCkJTR3dYQnRkbVFzSXBJZndvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRSW9Ia0hCalBJcEYvLzQ2dkNEZQpSMU1NWi81eldnZFVST1ExRC9LT2w0RVd1K25HZDZuRFE1ckx5N1lDQW9zamg2YjN1M2d2cHBnRjl2UGpGNTc3ClpuSXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBQjF4TUtqcEFYZjhkSzlqTlBKY3F3ZWJSTy9CQXphaUFuQjYKM3laTkVacERpZWlaMXY0RTFQT1FMYWNKVGRtbWJrVlBxV1JadElueUdaVERHOUFNMk8yU2YyanNoNW5YUE5tRgpmdlBlVmk4RWRRNzVwMm1FTVlkUUxJdjlsM0tTTGVaUkhyNXFqUkpMMVkyL1FXNlBIeFFCaHUzbmRiMEtQK2JmCm9FaStnS2NUenNmclJOUWZCQnlJTzAyZnRYcExpdjlCVVErejJNQmM1SnprTmNEK3pIMUloRzRjQnBWQWRUanMKTmhNSjVkLy9jSlJNKzBZZUVLRFpPRkwzNlNJdFNFRWw1U1kvSUIyQ3lNQ3A1Y25XVXlCTkdQcVlzdVJaOHluOQp6R1Q2ZFJhL3NaZ1Btd1R0TDBBMEJzSTV5REFjSGxxTnFmeHI1Rm5rVzVvSlplTHdZMVU9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-29T10:29:27Z" lastUpdateTime: "2026-07-29T10:29:27Z" message: Auto-approved CSR "csr-cgb8x" reason: AutoApproved status: "True" type: Approved