--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T20:27:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T20:27:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-16T20:27:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-16T20:27:50Z" name: csr-lmq5z resourceVersion: "6071" uid: 223c3937-51af-4e8f-bb00-4e342f675a9d spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=db3256e2775e8fe79c9398b06c284f647a2386b0024f4e6f40d1d1213b73fa6e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-53.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQUl2N1lYb1ZadHQ3b2xKRlo1RjN3cFl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ERTJNakF5TWpVd1doY05Nall3TkRFM01qQXlNalV3V2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpjdE5UTXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFZXp3eQoyUDNLa3hONlRYd054dUlKaUNZck1DVlRaUW5DbUpnQ3l1cG1PL0YrTzJzN3VoQTl4ZHJvakQ3YW1uQ2dnQlgwCjlaWFdESnYweGpDZm11bjFFYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUM4bFduNDFRRjFXUlBBUVZtQgpnaERYU3VuQTVYaHdwTVhjSW1ZeGhDSWNLNHF6L20zUU0vVjcwN1pVL2UzR3JXUEpUbXpGa3dJaFVpQi9MZldCCmtWUzlNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUM2Zk9zTTRHTW5zSDM2Z3V6emZmdEU5OHF2ZENlVzE5RVoKbWpSY3ZpZk4vOWNEaGZubjJ1anFUZVZ2YXJKTWZLMnQ4SWFTM2l4bXVBSWlNSUJrbDJkMWxwNHpETTI2QkFzTgpYM1U5RGwyc3JLUFNYT1lLa3hhTWR5T0Jtc0YvSE5uanZ5M3lsdk40U1haUHR1MFJPWHBXT3RvSUpUQWtkaEEzCk1LSFl4Z05sUVNWbzZuQ2R3OVRHaWd4QlNoODNVWFRnby9oaXF5SUUzWTROcWhiemlML0M4V1QwcmFUYUlKcVoKT0VGS0ZYVkxLVlZqekcraG9HNHh3Z1c1VkZFTm03Q1QvbmlITmZIU0hYRWZLTEdFbWNMVnppWkh2d0t6VlpZdQpQbTErcDFyWWl5c3BZYzEwR256UUs1em5WM0ZHbVQzQjViZ1lpRTQ4OHYwa2paaHFENW5VCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-04-16T20:27:50Z" lastUpdateTime: "2026-04-16T20:27:50Z" message: Auto-approved CSR "csr-lmq5z" reason: AutoApproved status: "True" type: Approved