--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T19:23:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T19:23:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-22T19:23:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-22T19:23:43Z" name: csr-p4925 resourceVersion: "6367" uid: 8de78e5f-1212-4aa9-a7b6-c11cb7952c36 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=049bd62ca006b2330f7eaa67d7c0fb6b032ff3115f279a3928f7109894395d03 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNek10TVRVNUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQks4MXNEQ0NlWW93WjludlVXN0Jvb1Z5bmhqeWh0SCsKWWZhQmRDZ3FYa0VyKzRydzlpVTJhUm9HQ2ZrYTVUOXdRRlludkQrQ0xSUU1rWVNkVm90bEdLK2dBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCbWpBcnQ2TVQ4Q29OZFA0OHhwUDdHNkRVN3RNbWUrRHNaeFI2VzlUaGRxZ0lnClRNay92RWRrejlHK2pkSUtaRGpwS1d2V21yTGYyWmN4UnhNMTVsOUJhSUk9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-159.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRUUNEeVhmR1h2MXZ0aEYyZ3ZvMFJ4REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBME1qSXhPVEU0TkROYUZ3MHlOakEwTWpNeE9URTRORE5hTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTXkweE5Ua3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFcnpXdwpNSUo1aWpCbjJlOVJic0dpaFhLZUdQS0cwZjVoOW9GMEtDcGVRU3Y3aXZEMkpUWnBHZ1lKK1JybFAzQkFWaWU4ClA0SXRGQXlSaEoxV2kyVVlyNk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNPRlhidVgyRkZJTzBrSmc4dwpuOW1nbXRjRXcxamZlMUlla2NoV1Q1d1g5UGlLdzVwK3F4elZGNlpBWWNIYWdvaWVOSnJzTDJKSE53RnZRM2JlCjRvY0FNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNQTERHS09EWkcrNzduU1hoSFBHT2NPeEdXR2NLcU9xdGYKekpTb2FkNWhEUW9oTHRNQU5sdy9jWjRHcHdnaFYwenV6Zy9Eb1VKbTJnYnpIWmpnZ2dFNU5WelVjYmZ1b09EdAp1OEppZUdUcTZIeitkVlVGV2o0eE5vbGJTNnJOYm5sT09YcmxTeEQ0ZjBtNGpObTJYc01BV0xEYytJZ2J4Ym91Cnd6ODZkeWR2WlhxU09JOUdwWUdJWmFURXQ3TklqV1JRU0FHMENpc1dObDZ0OWFJYXhuWU5LMUQySGJmYU9uaVkKVVdNVnRteWs2RmIvY3pMNGt0WWJHN1dUWnNWM29WVGVYZHFNOEdKeG91Y3I0Y0M5WWJJMkVwRE1UekxyV0tNUAp2VlhJSm8wb0FvNUdyZzBwOHVjT0s4NlE4N2FUTWpkLzllMlJJTW00Q1FoOXZ6aUd0UTBICi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-04-22T19:23:43Z" lastUpdateTime: "2026-04-22T19:23:43Z" message: Auto-approved CSR "csr-p4925" reason: AutoApproved status: "True" type: Approved