--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-24T21:27:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-24T21:27:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-24T21:27:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-24T21:27:34Z" name: csr-72dpg resourceVersion: "7483" uid: 6882235c-4182-4522-a8e7-319edea0b65b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=8869149672b14f706094a954a540a173f4f7eaba0828a039ff4ac7d7cb93b9f2 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRqQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamt0TWpBMExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkxiN3hqbng0QWJleVVzaUZPS25PS081NTQyN2ZWTWUKOEJ0US82RU1XalkxNnhXTjFWTG9yV0ZGY3J3SHI5bE5VaWp3QWFoUGF6SzhMMGMrQTUyMTkvV2dBREFLQmdncQpoa2pPUFFRREFnTkpBREJHQWlFQWtVdjhVWnVvYmhlTkRNV1VuRzFIbFBKMFBRZVlCVEhlTDN1bW96ZFhnMHdDCklRRDlZZHZBbisvb2VkUWUwSmRUVjUzcjV6Mk9oK2xpQTdHcnNOWm95MVdlUkE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-204.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU5EcDhueEphZFkycEsydWNYY3ZOL3d3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESTBNakV5TWpNMFdoY05Nall3TkRJMU1qRXlNak0wV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWprdE1qQTBMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkxiNwp4am54NEFiZXlVc2lGT0tuT0tPNTU0MjdmVk1lOEJ0US82RU1XalkxNnhXTjFWTG9yV0ZGY3J3SHI5bE5VaWp3CkFhaFBheks4TDBjK0E1MjE5L1dqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBb0tudlNOcDRzWWRhNlBJYwoxWjhVN3JWbkhVNjRNbkt3eElZd2Z3U0hZTHdUVkZhT3VhR011YmtiSTF0djE2ZXQ0T1hUN04wSDdFSG1abE5JCm5YT0tEakFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBWTQvaWx1SDM1RlY1K2lrRWJDeDFUS0J0cVMvQlJrZlUKRUpZVjhQd1c5UXFzWVduQXVmZzB5d2lHWjJWVlpSRDFMcFZXTExPTEdkWTNJZ1VEeG44SUt1eldrcmJkNytjSApuRDRzdnY2MHlOYkZyT0NKVDM5QW0rVXNCSDlXdGNrODVvWXRQMkxlQ2YyazMvdk9TOE5mMVR0Z0R5N2hDSmEwCmk3ODdQa1BrZG9ndXF0L1NWOWlWS2kyc1E5LzRmTjIzS2h5TlNvcnAraDJmRks1SkZ4eEd3MEJiVDd0SDVPeUwKaE4yTXBTZmR1d2VTQTBoQXhsWnZ2V05PVVhLWVhVdHdRR0FuaStVdHRBWUlFbXhUMXd3a3YvWEpuZ0Y1MDdvZwpGVlhzS0tvcmpiajZQTkFQRGJ2UG9qUWFlVXRLS3VNd0d0Q25kUG9EcTlFTXh4cDIxaFlSWVE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-04-24T21:27:21Z" lastUpdateTime: "2026-04-24T21:27:21Z" message: Auto-approved CSR "csr-72dpg" reason: AutoApproved status: "True" type: Approved