--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-13T02:01:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-13T02:01:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-13T02:01:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-13T02:01:21Z" name: csr-r29qf resourceVersion: "7371" uid: 06627abe-df6e-4cae-873a-dea7af3feaf6 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=67012487e0c6d7a6f501a9745b4c59f4bb8f2b924c33cf8495c5a72a47277d70 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-107.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU9aKzMwSlFQblI3ZlNVMlNMSnltZkl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qRXpNREUxTmpJeFdoY05Nall3TmpFME1ERTFOakl4V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpJdE1UQTNMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkM4ZgprT3d2RDJ0cFowcktmL2kreTRXY2FxQisvOFlYaVpFTzJDRFZkTUFFamtKVS9RTWpOTklML2dGZlNJaWFGYUdNCnU0SGFZT1l2OE5LZ3JpNis0dzJqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBdDhNMGxyNyt5a0RsZG81UgpjN1RuVXlrYW0yZGFCRFlpTjZwZmg1OTV1RkpDaHZiQTRoTGNzcGJ2RlNqelY2M0Qyd1VtN2Z4ZjN1ODhvdHFSCmRTaGZuekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBWkN3YTJBa05PRXZqTUMxNDBTUjB5NVdkcVpWWUtRYUEKdWxhQU5zTDc1M2c4TmRna3dCaGd1T0lFYjNTWUduVEIwUVNUVWVUZnoram5LcGFLZnFrcXcrTzVEOVM4Y3NBbAplL3J5bnlHV1VVNFZDd2lKUjNrOG1BQWFkSFE1T3VFVVE3a3pxc1owa3F0SUxINnBza1dIV3Z4U3BmRFV5Ny9jCkFoc3paTmhaYXpKM2tIWHMwY2t3aUFYZ0lNZS9CNnJTeTJHUi9EUVR6SXk5VjQ4cEsydWtQVTdsenlKYUE3Z24KcVVkd3gvbHZIS3hDQW1EVjJzVVFMdDZZNTA1WHFIa0RKYmNnTi9qckVTZ0l6d1NYQW1OZngrM2dOc2ZLQWtwVgpTUVRkQysvVGxxOWIxU2lXd3dpeFlHZ2R0N3I0YzdLY0pjVTRBTE1QRjFoMXR6YWJVMFUyN1E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-06-13T02:01:21Z" lastUpdateTime: "2026-06-13T02:01:21Z" message: Auto-approved CSR "csr-r29qf" reason: AutoApproved status: "True" type: Approved