--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T23:06:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T23:06:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T23:06:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T23:06:53Z" name: csr-wkbsf resourceVersion: "7335" uid: 7f073024-e882-451f-b4a7-a17484d775b4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=1d969b19b49ded1234b5f9ce8cad6b53b02b3bdbbc71e930fffba8cb0090f8a8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-233.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQVBlVFJTVW52V2tmTE00Skh0Z3JSN0F3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTNNak13TVRVeldoY05Nall3T1RFNE1qTXdNVFV6V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWpndE1qTXpMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkMzTApMY2NPbGlsekhaWk0rcnRtb0l0eTlDSzgwUUxrSUV5WThCVEcwaTRVMXVuam5YR1l3dUxMNWN5bTlKZkd1cVVlCmdGV09lSVlURkJJQ2VwaEY1WVdqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBQWhyTWpUclo4Q0VndE1NZQpScVdBbnV2d3ptT21aTEd3cUVVNzdiMGpNNE9URUJEZUxtNkFZUmU3T1VGRVpZaWRMSFQ5QTU0N0R1UXdrbGtYCjB1ZXlOekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBWk5xS1hzS2ZZajRqbVQwSEJ1dTRSY1FMclVtblRsWjQKcUtaVmpuMEtkTlhoUVpNTDMzZkZtQTZQRVpHTWhRQTlZd29aVWxJN25WNEN0NG5wT1dYRTRncHNTeEtIclNRagoyL3puSnJNeDBlVDdmUHEyUElyeDZpNzNuUHZCb2VSTFRqZFdXRTFySWFSRGgvRDQ3c0tjZExHcHBNSmN6dXcwCnJ1MS83Qi9vMTZmSUxYMmtsN0diRGZjT2lKVHRWOWxLTDJsN3Z5TjAxNlYyOGNSbXlNWGpsc0FlM2JKNW9GLy8KQVBJYkllYkhHL3Rza2hZVjBzY1BTYkh5aVZ6ZDNlNHVhbDREZFJEQlNSS21hY3AxZkxOQy95YkVSTUZMWSt6dgpoS0Z5YmZxOVN5S3pHQmI1VUttMVlWTnhtcVM1Z1BYRm9tSThwUGV1Yk04ZTVnT0xpbXNsQ1E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-17T23:06:53Z" lastUpdateTime: "2026-09-17T23:06:53Z" message: Auto-approved CSR "csr-wkbsf" reason: AutoApproved status: "True" type: Approved