--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T17:57:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T17:57:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T17:57:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T17:57:21Z" name: csr-zzxtv resourceVersion: "6714" uid: 8aa8fb7d-fa75-4536-abb1-3b0c15915426 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=0c9eb30d5675000b880664462190046f01e9cb13eefe3d8fbd64df5538df5457 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhORE10TWpBNUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkY2RlhHMTNBWGlYYURwNjRFQ1hPYjRBdVcwcStXdSsKK3ZPSk11MnM3U3lKUkxFSGhXVnNwYy9wUkR1eGF2bWRwYzd2S0lPRmgxNGsvWUFDOUlTMlF3U2dBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCa1ZBWjlGTU5DTzJtL2Y3Q2xySG9nQnpRK0dtaVBJT2FSQWFJWTlkUWprZ0lnCkNZcEcrYTdFam9qaVBrTUhhWHlucnE2dGkzeEF2MmFNdmw1ZlJ4eVdacmc9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-209.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUx3TkMrK3EzYnM4cHBRSWRLbkYya2d3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTNNVGMxTWpJeFdoY05Nall3T1RFNE1UYzFNakl4V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRNdE1qQTVMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkY2RgpYRzEzQVhpWGFEcDY0RUNYT2I0QXVXMHErV3UrK3ZPSk11MnM3U3lKUkxFSGhXVnNwYy9wUkR1eGF2bWRwYzd2CktJT0ZoMTRrL1lBQzlJUzJRd1NqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBNm1Fd2t0UWpLMk9vVlErdQpjZFlmSnVOeEc0MC9sait4NWtRSFdLVTNaVWk0dmhteU1mYkIxdFB1bHJYcVlTTm9RYUY3R01XUGdyRzhkOWd5CkVvSzFZekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBVVhOV1U0SHIyb1BncHVWMXloNGJtZ0lTL2gzMHBBaUMKeWx1aUQyQjBUMng0UlMzRy9KbDlwL1UvRDhnZ2ZSN1NSOVBQTTFmUVZFM0FDTGRQaWJtNEwxcllkUlIvNFpvagpqZE5YMWZOK1JuQkVqcjZrR1l2VmhBWjRnVTVBS0dOaHppTW5SeGJ1NzJGVkIyZTJQb0lZeUZNQm80bGtoSXFOCkpiWUo3QVEzTTkyZmhSQzVZaHZGdU5wbGNkTVBvQzA0RDVKajFRTlF2MDF0d0ZNcVBCendNSWhZekJSN1pEYncKZVRkeTFzL1FSY0dSVU1oaVA1ejVBbE5GTE92SnN2YytTcmRtSlJEUUhVaVdFSkVzRGRTZFF6bDQ0dkhXT3RuOAo5RmxueXNrRkNEbEd0eFVJRjlqRHE1dW5taDF3Ulpzd1VUSUpSdGdEVmI4YkJzRFdVN2NlMHc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-17T17:57:20Z" lastUpdateTime: "2026-09-17T17:57:20Z" message: Auto-approved CSR "csr-zzxtv" reason: AutoApproved status: "True" type: Approved