--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T20:19:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T20:19:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-13T20:19:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-13T20:19:31Z" name: csr-x458k resourceVersion: "7171" uid: 63e4b7e5-c5c6-43ba-bef5-546c3b337df9 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=367e89e384da8c0a6c44c85a2cd74f8d452b470cf1e8e7fef851ea12a1424d46 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-42.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRUjJkZ2xiQnRSRUJ0ZnB1aUhla3c3akFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UTXlNREUwTXpGYUZ3MHlOakEzTVRReU1ERTBNekZhTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTVMwME1pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVRpcGd5YgpnWjZTY2ROa1p0YjNUYXA1aXVqYks4UWJBZ1BZdHdjWVNJVGhBZDQ2QTdtWXZnYUdGOURISFhpblJKSDZhOWlRCmgyT0RHdE9yV3E3b3MzUmhvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRS2kyUGJFbVZWWWV3QWVFSFc0aAo4NklFWExJS1lNclNFMWtzYUhPVGdEZ0hPc253MDFaWHV5MXhvalhIeGdDOWFObmt4OGZpalc3VHhjWGI1WXgxCkJKVXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBTXBtUkE2N2NDVkVVNGZSc1ZmOGRCaGcvbGNab29jdVVhMDcKTXZBQVFhYWZzZE1KSlhYNmhkd0Nsd3ZuNGlBWFdtTkJpN0prQVBzQUVFVC9qeEVCQ2N3QXRyQjdOeStXTmhJQgpKcGlVd2p2YmdBQTRyakZpTTNHeWxhL0ZFM2R0VlpYb2dTcEZNbzhqWnlHUDVzSXBXdm1mZVNHN1I3QUUramppCk1lYzg1NzZMSFc3dk5INm5GaWVCSzAxMWpDdWF1aVJnSFVBZTVFWTNIY05vZ3I3bU0vZlUweGV3R3BqMUNuTEwKSjE4UTJZdjA5V3Jqak1EUHh4NDlqdzBLeisvbTYvRUpyNVo3ZWFFVVBVaEEvbXd3V2toaG5DK2d4SVFUaUc1TgpUN2dtZjdQZE1TQnlqMWhzOFdFT08zVU5yR0xUY1BKNEJTNVJnK2w0VjdaZk5iSE9hTlU9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-13T20:19:31Z" lastUpdateTime: "2026-07-13T20:19:31Z" message: Auto-approved CSR "csr-x458k" reason: AutoApproved status: "True" type: Approved