--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T23:10:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T23:10:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T23:10:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T23:10:54Z" name: csr-rlbm2 resourceVersion: "6018" uid: 6032f523-e315-4d5f-9182-e8c3388cc881 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a640f52c89771c575468ea71480679bb34791fe359f3fda3586bd58a6025f5c0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-188.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUliUjFxNExGQ2p0MjhGMEsvY29pK0F3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTNNak13TlRVMFdoY05Nall3T1RFNE1qTXdOVFUwV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRBdE1UZzRMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkIrQgowRDRWKzdZYXdHOFl4RmVvQi9jVXFMM0dVVXE2TkVsV2ZUT0k3L1VsTTQwZFE3YTlLcnJGRUJFU1Y5ZnFGMkxwCnZLZmR6TTNveFFUWEljQ3hDWVNqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBL21SMVFzMnZFMU13dDBaWgpycFBaeDEzUVY1NVlmdEJUU1IzZVZEZHBkUlV2YnIySnVmak56MXFndmlTZXVjZERXMS94WDEyaHlSVmx6QktXClRFWXZaekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBRkxPdThFMXR4dndweUhiNEs1MDBEbDAyckxJUzdqc1oKK0E1dVVuRHFlSmtkaXR3eElTZ3BrYnRMRFd1ZmljMWJkMkpSNTFQL0xsZ0twaHN1bmRoZStqdWlqRGtOR0JTeQovdHJ1bEk0bU5PTHRITndjUTVsV1pUeVFiT1ZNdHVtOXRFSWkzMlBUclpuVE1xU3NZTWlxQ0xRZnhzdmtDckFuCnZSU2hvbVZBc3poMXpPN3p1ZjZSSHprNjZNd01rRjlmb3NsWG9YczcxNnFkL1hxV0J2NnhPK1pPMkhuNTVBdW8KNkJObTN0NnJ5ZGZYdXVmcUFJR0x6R1lUUGlGbjl3ckxuaHkzOWs0TGZ5N1BkdEpZUmNNNzRYZ2kzUHhnbjcrVApnam1UTzVwakZNdm9DSmQyaUhHQnV5eDdybm83bTV0eWcvUktjdHQzakljd242TFpiUmFhekE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-17T23:10:54Z" lastUpdateTime: "2026-09-17T23:10:54Z" message: Auto-approved CSR "csr-rlbm2" reason: AutoApproved status: "True" type: Approved