--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T18:10:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T18:10:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-16T18:10:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-16T18:10:02Z" name: csr-z8kz2 resourceVersion: "6166" uid: 21408122-65bd-4382-b9cb-dfa07d32bd91 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=063423b63fb80f9faaa8179f6f332c7fefe855c1bb0dbded7913dd26167801e8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-102.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU1OUE5XTHR0c2JVbkZCQ0pLVE5uMlV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ERTJNVGd3TlRBeVdoY05Nall3TkRFM01UZ3dOVEF5V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpjdE1UQXlMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk84dApQNFVZSkVmbXRSQU85V3JZOXhIYUZ3aWpOa2drVEN4RDBCbUpUS05OU2t0MUxPcWw4M2JxM3lOU3lrQzdPaTJDCjkzayt5ZUR4SEpISzhUTm80bXFqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBdkdLbll2THNmN05VZnlLRQpPYm43VmdyNWpqNmdBdmV6ZjI2eGZHalk1KzcyNWNoMzNNSGxLbjVVV01rdTIrSlRROTZ5aWZpRGtCeEtkZzVaCkFpc1MzekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBbkxxeWp6THI1aWpzUit4NmdzZDdQQmNqcXFSQ1NvS2YKMkFlaWtCUW0ya2kxcjl0WDVGUEJwUFhhSWx5aUNkMlJSR1Jzbm0xblBpcXZIL2VUcm13QVBQV1VXN25CdHpacQovd0syZmNQYTBqT2IwQ2dzK09jQ2hGcEpZVDNWNzY5N05pQmJlayt6RlcxTkdtL1h4eVcrdXBwNGRaK1psTDlyCkVKYzQ2NHFUT2xBK25pUDhrVm5tN2k3a3JWMThMLzlxRTZJUkVtVHZjbWNGNWtWZTFIVzRGL1h6TlNhdU8zaWQKWll5M1o1amE0WW5pc2FaTWYzaE1kZXkvVUVpcVYzNTBEeHNnQW45S3BBNmFPM011Mnk3dGZZTk44NW5EL2NZRQp3OWdZWkJQcUlMVUkvQTVRMlBwdGp5RlhCZFQ1WlVrQ1hST1lJVS85L3BJaWNrTTJaV0RoTHc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-04-16T18:10:02Z" lastUpdateTime: "2026-04-16T18:10:02Z" message: Auto-approved CSR "csr-z8kz2" reason: AutoApproved status: "True" type: Approved