--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T17:58:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T17:58:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-24T17:58:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-24T17:58:24Z" name: csr-78tkz resourceVersion: "6850" uid: e3c68725-ad41-4efa-888f-642c96889598 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9d36b3e372d8aa8d7507f15287f61d0d21266384f0f5b1ab7572a33c1c5a7c00 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-89.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQUlNOGVzM3Q0cVFoNm9oQmFieUE5Wmd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STBNVGMxTXpJMFdoY05Nall3TnpJMU1UYzFNekkwV2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWprdE9Ea3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFMzlFYQpxeUU1K0JuZ3E3RTk5NVhEajZLb2p2bjdpQTBETFNWTStON0o4Sk9STjBSSDU5ZEZqQmxsSUhoaVI4T1NRR3Z0CkpNZU5LeDZVUzd0dkl3aVlDNk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUF4M0dNK3R4cW9ROUVvUmx5cwp0MGllY0wydkRscldKd2M5ZkVqN3ZzK29nQ0RpUzg1Z1g4TlNBZStFUjRaZk4vWGIyUTNkZWtSRWpzU2ZSMGd4CnFhd2VNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUN1eGJRdC9JeFM3ckhwRWdOWEJwQjZZajcwU2JidmdxblkKRTJKVU5rdFJsZjFRMjhva0JVQnZYQTJSZndscUdpdXNGWGFZVW4yODNBQ3ppMktHbzBaTTBySU9GaGMrUUhZdgoxN1dOYjVKaW9XVzZxRWI3NHRFN285OG40d00xdWZYell6emdZWGVCaUJ3eHJOREZ3d1VuamlFRlNkM3ZsUzlpCnlJd3pBQkM1d09vVHBSOHY3ZGQwVS85WFcrRDBQbiswcGpKMFZLZ1lERG9mR1V4a3VpdXByV3JnOHY2eWxTV2UKT3IyM3NMMWlPQ3hiRnNjYWxuL0czUTQ0d1JmOXh4RWIzYjFxdzh5M0tYYms5Q1F0SG5qbktaWjhHRitxR2lPcAoxd3RMVmY2b29iNUI3ZHJZU0VzbXZ0bVBBMFNSWmhacGdvRi8wa0RKaTZ5TklHQW9IMlV4Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-24T17:58:24Z" lastUpdateTime: "2026-07-24T17:58:24Z" message: Auto-approved CSR "csr-78tkz" reason: AutoApproved status: "True" type: Approved