--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T04:04:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T04:04:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-21T04:04:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T04:04:38Z" name: csr-lgb7m resourceVersion: "6750" uid: 5a3a23b9-6302-4836-97bd-82cf6da7122f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=7df29589b7b5541baa931d4c1b42712d1df3ec2b3f6a95edda90af97ad95442c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-0.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3VENDQWFtZ0F3SUJBZ0lRYWpGQ01jTHhCczh6dit6ejJZdW9xakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qRXdNelU1TXpoYUZ3MHlOakEzTWpJd016VTVNemhhTUZBeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhNekF4QmdOVkJBTVRLbk41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTUMwd0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCTU1JczE4QwppYjFUOEUrUmM5TndOSDliQm9vL1JBK0pvMjhUMHFCUUpIVmRFTXI1OXhremVmK3dudTlwODdHUTcwWGJKRnhoCjhWeVdueDVRcDA3MldhS2pnWU13Z1lBd0RnWURWUjBQQVFIL0JBUURBZ2VBTUJNR0ExVWRKUVFNTUFvR0NDc0cKQVFVRkJ3TUNNQXdHQTFVZEV3RUIvd1FDTUFBd1N3WURWUjBqQkVRd1FvQkFXMzNya1VkeHV4bHRrZHB1aFIvYgpzMlRaU2R5RHNMTExnZ2Y0cFd1V0YxN21RNEp2R2YzazZEUnFRajVHYUlvbmVqdi90eVpWVm4wMFRVQkE0UUZqCnBUQU5CZ2txaGtpRzl3MEJBUXNGQUFPQ0FRRUFKN3NNK3pCYnRNZjB5ZGQwSnFadWUydy9TUTFCQ3FGZllNZTYKQ2x2UVRhN2JVYTQxVzJMLytoT0NOalBtVk54MDZMVmJZODF6ODJieFk3N3Y0QitINWtDUSs0ZVMwNDZ2TnJKVQpORlc2ZWkrc20zTU4yRHZnTGZ1QXhiUVVYWTZ3K09WenNYbW1HVmtiODlVbHBxRmdJbWVzdldmRWFSc1c2VXI3CjdSZzUzNVFKQ1Rocis0ci93S0VhVjA3SUZ6UXJkSW91RklReVZuZGhpc2dEeklzZ25EeFEzbmVNb1gwZFF5cTMKaFJLQkRsV3VWeU1UQ1hMQ1NlK3BBUVF0ZFN2M2NnWVJmNldTYjd2QXJ6cVdvcHE2Q290SU5hN0FJc2VrTUw3cgpWb2ZRMDFKUXdDMHE3dVJ5aGtrUlUrYkhwV1ZTd28xQm82OEFVbi9HcUhTWGpvYitBUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-21T04:04:38Z" lastUpdateTime: "2026-07-21T04:04:38Z" message: Auto-approved CSR "csr-lgb7m" reason: AutoApproved status: "True" type: Approved