--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T20:07:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T20:07:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-03T20:07:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-03T20:07:32Z" name: csr-z5hjr resourceVersion: "5404" uid: b925e0a2-ee69-4785-9c6e-3e570eafeb49 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3738216c9ab116221995ce1d23123061411f1fbd74cca48752eb44712953ffa4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-171.us-west-1.compute.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUMwVENDQWJtZ0F3SUJBZ0lRY3pGNTFKWXpvdkY0WUdNVUdaaWUvekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ETXlNREF5TXpKYUZ3MHlOakV4TURReU1EQXlNekphTUdBeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhRekJCQmdOVkJBTVRPbk41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTWkweE56RXVkWE10ZDJWemRDMHhMbU52YlhCMWRHVXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncQpoa2pPUFFNQkJ3TkNBQVJSbXJmRVptcVNwUThHbW9ZUjNQanp6Y0t3bFU1M0M4R3E0ZENLQzVSYldjZ3NzZDl5CkZuL1ZIc3hxOHBJQ1A2Y2JCY3pRM2RnTjhmVDNjOTB5eUlRT280R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUgKZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQQpRQms1bGlKUHNTNVJ3NFZQa1BxTGZjUzYxYzBKdlhSMXl2VTRrbzBVeEkwcGM2c0RhOGJLaEpUU1V1VVVJWlpKCjM2Y2xxOElwQmYxV09xRld0MXlRVVpJd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFNWm9ZbjQ2c2hzMHFZajAKUk03bzNFZzdOSjZ6bWI0TDhpNUtyTVhWRUF0aTRMcVQyd0s3Rlp3czhtOTdlbTRDOVVxRkZFMXZDS0xDbFBiWgpvRjk0b2dpL2hVZzVMcmhoamdtMzRmOCtOQUE0RzFFMzhOaGZQN0dTSXhMZ3BmalhiN3JVLzVBeUlEZWt0a0NRCjk0Q1dKQTNCU0dIQnNVUzZVNnF3akNnRCtldGoxU3Nha1I2bUljNjdEb2VLY21TYjJLTDRFYmJQL1kvUlZGWHgKbDcrY2Jpa0xDSk1HQ3BKbjRzMUpDalc4bDhDMmxEbzJCQjJiZ0RpQVdQbDNibXZrSXYrZVRZY1lhK0sxM3Q4WApmc24vZ3FuL2QxTUt0d1JacThZWk1uZkQvdGh5YkN2alNUdkV4YlJKOCtHUkg4TVNpWTF2aFB2VU56R1l0eWVPCkpPVmtNbDQ9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-11-03T20:07:32Z" lastUpdateTime: "2026-11-03T20:07:32Z" message: Auto-approved CSR "csr-z5hjr" reason: AutoApproved status: "True" type: Approved