--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T18:17:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T18:17:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-16T18:17:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-16T18:17:03Z" name: csr-hthq8 resourceVersion: "6679" uid: fad6c496-b972-4e03-adad-74ec68171e3b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=44e34a732392c4f0e1c4181411832c822c9d09d74dcbe29712cbbe0ded753d8d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-203.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUwrbFQyQ0haSC96a2VwTGNQeGVvNGt3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ERTJNVGd4TWpBeldoY05Nall3TkRFM01UZ3hNakF6V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpFdE1qQXpMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkZGZwpQWU9LZUx2ODgvc2VRcUs2ME9MSGx0TGplT1o3NkVUSHdwZjBRcHdEdXVVVDBZeEdqZ1lYd2ZDZjl3N0gyOVB3Cld2dk9nbDhiTWdTcG81T3d4T1dqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBSFVuZS9hK2hLN09LZHBYOAp0WGE0VFdEQXBNMWwyVjlEQngyUWxtSzhPK2RqRjhjU0xLQ04ySUNCTlI5RlFMTXpZb09KbG04elRjamQ5dEFVClFpL1ZKVEFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBRkRpd3R6VFhoV2R0a1BzUGV3QkhzVXMxdG5sZUQxVUcKUVpLTEp2SVpMNXlINTBJYUNscE1qWDROL3U2TVJ1ZlBlWUJTTDMzektsdDI0Qmx4QnBDWHIzKzZNL1MxaDhpcwp4VzJQZVJGV2JxSVF0NjJqc0hsV1diT0tXcndjMXZHZTBOa0U2QWlrNzlVNnlSNi9vL2sySktMRHBWY1duamhrCjFycGR3NkoyaXhnYXBKcnhNS1UvZGM5d3FVNFhIOXVzN04zL3g1bytrMmJTR0t2am1Ra29mWFB5d0JrTkFXWDkKa2ljbjd6bUIvZ21TckUyelVnWGpGQXA0OXZEQXJXMzN5cWRvcUI2TVRUZkljN0FKaXFSNitrZHdpQno3eTZWTwpYSVVMZmFLTFNoRWtZM2ZBSHJVTTNlUE9sdnExYWNVbElLRUtRZ0ZNWUJvZHU1UjRKQUllWlE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-04-16T18:17:03Z" lastUpdateTime: "2026-04-16T18:17:03Z" message: Auto-approved CSR "csr-hthq8" reason: AutoApproved status: "True" type: Approved