--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T23:46:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T23:46:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-31T23:46:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-31T23:46:49Z" name: csr-d9ffr resourceVersion: "7103" uid: 7ad700a7-39c7-4d31-aee7-01eabab94f5d spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b5c24a9ac2a778f13ba0791037081c7ec8484a443fe3583d52ca0cce800c1fb4 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRqQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNekV0TVRFNUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQlB6aVlTUzFqbWZTcHNQR085aHozcXR5N2xkRDRKZnMKekgrUWJ4ajIxaUtXZ3FCZDdrZ1AyRy9yaEJwMTdSNysvZ1lDYXgza1dWa3hhMkpDeWE2ZjlvbWdBREFLQmdncQpoa2pPUFFRREFnTkpBREJHQWlFQXdrWExUZjRORGM5cWx0Sm5VM1FqNFd5OHhDZHBvc1A3eElucFErWWZzdHNDCklRQzRrVWRGR09jMjdDeXVSb3lXcDhTbzdqZWc0Y2FTQi82V2J3T0pEWk1zUFE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-119.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU5NRms1WUxpRXdHcWhZWU1IUUJibFl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056TXhNak0wTVRRNVdoY05Nall3T0RBeE1qTTBNVFE1V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpFdE1URTVMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQlB6aQpZU1Mxam1mU3BzUEdPOWh6M3F0eTdsZEQ0SmZzekgrUWJ4ajIxaUtXZ3FCZDdrZ1AyRy9yaEJwMTdSNysvZ1lDCmF4M2tXVmt4YTJKQ3lhNmY5b21qZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBckpjaEpIUVBCaWtwd0hyTQoyTG9Xb1ZFc1AvTGd0YnBybU9KS0xxT0pCbHZoS1pzQXo3SzZkWjFFb2RWQ0RBRjRkbjM3ZnZVWTRnNmZBNlJWClJXQTMzakFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBTXVnT3RQc1NWYVVOcFg3TlZhcHp5UTNncG1ZSHZ0NmIKUCt5Nzl1RE92RDlHMEtONHdHckszVlVDYkZmanc1b3dUYmhZV0s0UnZaOVkvQWxhSEVQQXZjVTczK292R2V3dApqS1N3S0ZwNk1WU1AyUVhsREJ2cmxMc2E2cW1ndE51NE1hT1RCMTA3QXNJb3R2M3pmNjdZMEtTL3cva2dYc2lLCjVUWS85NWs0bHpFYndlbHVMdDZzRktvQ3ZUdjJXSVhZYUZYTWpnMGgvR0FuSTRjUGxONUFqS0ZOMkJYL1RYbkkKWmNGQ3hpZEV5RTR6MXZwZ0x3VUhqRkF2eGxEMXY4Skw5YjZHSzVCSWdrYlhXLzkvTjBTajNaNEhqVnR2Rmw2VApkRUVQMU1wVm5GUDFtTDc0TnE0enNBK0dBRXgyM1JTdkZXcndROW1INWR3ai9EcU52a3MwRWc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-31T23:46:49Z" lastUpdateTime: "2026-07-31T23:46:49Z" message: Auto-approved CSR "csr-d9ffr" reason: AutoApproved status: "True" type: Approved