--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-24T23:53:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-24T23:53:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-24T23:53:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-24T23:53:45Z" name: csr-kwsxz resourceVersion: "5905" uid: 8ba25403-0a86-4f3f-99c3-dcd946fc0ac6 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=dce8d6cec64270934a4e24cd7998348495d5d293c4d242a016e8541bd0a96905 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-62.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQU02c2plRHVXcE82WkQ2YzB5K2ZkVnd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESTBNak0wT0RRMVdoY05Nall3TkRJMU1qTTBPRFExV2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXprdE5qSXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFYnZxeApBbFRCYzZxL21wNnVXSlRJb25lc2haclo3citMS09IWGx0M0lCeEVsbk1BY1NZS1RGcHBKM1dSUTAyNDNzMkdwClFqVTdzbG9ZME8rb3dVNWFKNk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNKdWhROWNuL1dlcXh1ZDNIVQpvajJlYndRT3Y5U3hvc2ZRZGEwcWJLeEhxY2JaaXEwTW9zWGh0OXRDQnZ5ZytYaU9ldndFYTNBWGZmbUE4TFpoCmFRRk5NQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJPajM4akY0c09FaDZJOUtmcWU4TDEyZ3gybGtYTFcrUzEKRE5YL0VSeVlUMkNzLy9YYk5nVUtXNDJmU1c0UTZkNlNpWTZsRmZMQ2N4dEI3SDFQYkhseUpYYmJrN2dzQ2dwWQpKUXhVVDdFRWNkb0t0c0lFY0tsMTBHdDQ0UW9nZ2wvbGdXQWhpaXZZV2tzVFNoQjN3UTJ0NWltRnEzUHBFU0ZpCkpETkZhdjkzMEtlMmg5NzBoT3kvT0FmRjZ2dmVoU2ZaNzU0OFBZSjBYZGtUSkVaa0xkNnJENzRmTlF1SGlaa1QKYjh2YUQ1ajRQdERMYnd4a054OVdFRWJ1Z21EQjlRaTd1TmJ4Nm5XRm9VeUZRQ1ZEUThycEhIV1p1L2w4NDBpZQpIbmNzKzBaYmI0Q0I5R3E0OXBndVkxQmJhQXR5M0w1SHEyV3drUDNDZzMxektRT0E3eGJNCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-04-24T23:53:45Z" lastUpdateTime: "2026-04-24T23:53:45Z" message: Auto-approved CSR "csr-kwsxz" reason: AutoApproved status: "True" type: Approved