--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T15:01:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T15:01:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-29T15:01:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-29T15:01:44Z" name: csr-z5gvm resourceVersion: "5954" uid: 345fd970-fe31-4d03-92f0-71974317cf71 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=bcc054cd4abe02d211dd4f9c45b3e846aeb84583b8c6151e0f0f2735c7f577a6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-104.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUoyWWNoWWxuL2puRXlRSkw5MWRXYlV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STVNVFExTmpRMFdoY05Nall3TnpNd01UUTFOalEwV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRJdE1UQTBMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkR6LwozdjJJbC9HS2dLMUx5QVNtekVnWVF1T3lnMFZ0cVNyTVJiZHh6b0FMbmpOV0NZOHQ2MmY1OVpya0d6aER6QW5TCnM0dHFNeTFhRzhQS3NLQk9NenVqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBQTNZWDQxUnhSTm5VS2k5YQo4ek83bTFIZlRFYSsrcnpzVmVoR3BlSHJHU3BtbHgyVGlhTDh6dU0xRUhUZmhvWUZwZkU5Y3VSbC81bGI3QmJWCk4yWWRZakFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBTk5UUGFrQlNWVmZZWUdPK0F1QWl2cTQzbEhSdmdrU1MKS003bkkvWlEwNTdBdm0xQWhiTE5GQys1cXRVVDVxVjdDWGJIVHQ4citINmdBUEZ2VnMxYzZoWHQrZk5iUjhPdwpDWDJTUitua083SSt3dkhEbXFiN00vdndxZnYrVGVUbGYwNDcySjVnK0FyQUxoNFdzUDNpV1BVWFVoS0UvNEJYClBiekRIZlRHZWdxYkx5OEJML2paUncydXhJUWZ0OUNTZUk0L0VGand6L3ZHL0tuZ3o5UHhDR3RyVG5ZYUh2Ty8KTXNtQ1gyN0hvVFpHbkxDcXBuTTBTZkRSMCtJWTdRTHBOSXZTKzBjY2ZtVnplNDRxWWZ1Z3hFMitOZXc1YkZFLwpqSDdVNDRPWDRPSG1udXYxZWZnWnk0bGpGUmhWeVVWV2NHaVZuYmtWWndGYTdhMWRucDVUY3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-29T15:01:44Z" lastUpdateTime: "2026-07-29T15:01:44Z" message: Auto-approved CSR "csr-z5gvm" reason: AutoApproved status: "True" type: Approved