--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T06:55:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T06:55:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-08T06:55:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-08T06:55:15Z" name: csr-tknwt resourceVersion: "7215" uid: c14e9842-be50-4be0-81f0-753407706db3 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=953a9d96cf34f77b05f55d51ae099f058d219e00f997812a2bdb525900b574de groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkN6Q0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemd0T1RndVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFWUhWQnMvbnpDRFo5N1ovbmZ2QmhXN3FoN0VSMksvRloKUkdhaHUxZFhyQ2srdlVjaEhZcG1aZGJMOTRlTXZZdXA3aEQwZCtJbGpmWXV2STdaNVlQeUVxQUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwY0FNRVFDSUNUWWdoNHJXMGZFUHptaXp4N1U2ZUt2SXV4UER3VU00cTNQclJXOHY0M0hBaUI2Ck03elV6L1JjemhnK2tyQ0JxYlhmcXZpbnhsbVhFaFpMMTRxa25kZUt4dz09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-98.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQU5vTG04UllONGRYOVpKbzh4NS9OL1l3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTRNRFkxTURFMVdoY05Nall3TnpBNU1EWTFNREUxV2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpndE9UZ3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFWUhWQgpzL256Q0RaOTdaL25mdkJoVzdxaDdFUjJLL0ZaUkdhaHUxZFhyQ2srdlVjaEhZcG1aZGJMOTRlTXZZdXA3aEQwCmQrSWxqZll1dkk3WjVZUHlFcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFEODBFNUwvT1VGUHNWZmo2KwphT0tFKzBqaTg0eDI2bEtLNDRVV0RpVHBSV1hlVUhLWFE4ZEVGMm5INk80NGdGTnl0dVdSNVZZSmw2YXJpTjBBClU0SjhNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJjdDdVVy9iVGpOZ1FvbEtHQmE1N1MwZm5mNFZtajlWUFYKV3dWMnpFNEdCVjFtNWFLOEU3TjBuSG55M0xhRkcxSmwvVnIyVnF4SFY3cGd0dDlaRHZDYzU5TElWTmlKVDRmYwo3L1UzcERleHVwQy9zQko5S2xOa29IcjIwem9VV1BGOXQzdjcrMUY4OXZPQ09ENVF1cHdDakIxRzBKdW9HaVVLClZJRlplK0pnRFZDa01OUm9OOEVMYXhnY2Z2UEllNDQ2aUpLUEcwK3NpOFBHSUpYVFNuWGZ0d2YvdFgwYmVlVVcKYlBlRlI3a3EwUVNqQlRlKzB6cjlJTGg5Vy9HcXVhVStIcHByYlZlU0RnRFY5L1N3MWZFcDZqWThXMWwwNDJTQgpBL3EyQjZuZUFuMzU0TEJPYWRrcnk4Mmd1NXB5bFUzeDlxNWtTb1k5OVdKUFFicnJPYzZyCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-08T06:55:15Z" lastUpdateTime: "2026-07-08T06:55:15Z" message: Auto-approved CSR "csr-tknwt" reason: AutoApproved status: "True" type: Approved