--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T18:15:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-08T18:15:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-08T18:15:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T18:15:51Z" name: csr-9rjfb resourceVersion: "6841" uid: ee372496-44f6-406f-901d-beffd91afdeb spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9dc6c44b6f33245e1eab1a860a0f17c69091e2c9cb9355506f2775552e01ddf5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-238.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU9jQ2xhYUdEby92Y0xqcXR4QVRoQ1F3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTRNVGd4TURVd1doY05Nall3TnpBNU1UZ3hNRFV3V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRJdE1qTTRMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkRXawpVOVJ1a0lIay96WFk5enJtNHBmZTBrQlprVllJbExhNTZaOFNGSTdLUGV2TkE4U1RXVTcza3BIUnVFR2t2OXlrClplOWZGcXpMT1JwV0NRVC9NSXFqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBa0l2dGhMOTFEREhiZUEyMgpHLyttYTJxR3piWkZqTzY5VlhDbC91d1FEVW16NU11Mmtyd2R1NmoreEVvWUcvRDNsLzZtRFNIejdKOUs0ZW9pClJJWk1JREFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBbEplZjRwekRtT2U5d3BJNGtRY2RVdlRZREJIdnI5U0QKNmxNRWdwb2hmSjdSaW16cE53a25iZld0cHRiRmhEcGV5WGI3a1U3VFlyd2c3dmp0b04ySXJsdmdkdG5vc09RUwpsdW9HK3JxaG1OODJYcTdzWitIbjNXOEIvNWppcFlJa09EWkQrQjRqekg5RjBQWVluenMxMFZJanRheHR5TVNUCnJkejFEQXBPd3RDQWxpYnlwTlp6K3FMVjcyQzh3dXpzQjliSE9acEhmOTRCY2ordnNBVTRML3hROG9ZRXJaemcKRFQ2WlkwVlNhZXFPWC81UElENExUaUlwK0R1bGJOVkNMZGgxeVBWL0hkWkVGR3dEOU0vN0M0QTBKU3pjZkdGRwovYU54ZFp2UU4xYVFEOEhoOUVJSmROZ1Z5ejkxbFE2andaKzlnbHhrSXFHQWtheWFsNmJzVnc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-08T18:15:50Z" lastUpdateTime: "2026-07-08T18:15:50Z" message: Auto-approved CSR "csr-9rjfb" reason: AutoApproved status: "True" type: Approved