--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T14:00:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T14:00:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-28T14:00:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-28T14:00:15Z" name: csr-x2sq5 resourceVersion: "6956" uid: dc34d88f-aa8d-4b40-8d85-ef39db489e76 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=8d6a7de220233b6a3e07e05488fc3060e32b0491fc147d21d9922fa057f17962 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-71.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQVAzL0xrVy8rWlFRaXRkbm9XRzNacll3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STRNVE0xTlRFMVdoY05Nall3TnpJNU1UTTFOVEUxV2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRFdE56RXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFTXZJTgpkWHhtUzlNdlkwV0pnZHhTN3VOY3p4YjA5V292b2Z5YTRkaEJHMHFkMVZNeFc0cVQ2RFkvUkRsbHFXcXhySG5XCjF1S0xvT3JNenM1TStpc3lwNk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFLWHRwR0VyM1QzbTJmUzlFWQpZNlVqY05rOEl4ZmJ4VHluSDIxY0FGR2t3Snc3aUV5ajNLdGdtd1BmeDUwUEcraHF1cElnamRyUk4rMWZUTGpECjdqZ09NQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUErWjdWUnM4ZzkrMjQydVQ5c2xVMnh5MjBwWGdHaDVTekUKdUEvZ1Q5cisrRldQL2JmUFB3clJDcFBVcEhHVUM1RHc3TXVTRjFKM3pmZlloQUYxbjZhSW81WmozNmgwYVhpcQpMOWRYcjl3c3pLam5BQ291RXBMNGxUd0NIaHJwSXd5NnM4c0htMWszVXh5Rm5LWTE2dFcwVG05K2RzUlB6bzFMCmZreUhsMzVQd2pjR1MxYWExSGxOaUpnQWtNblhHK0RDWDFGek1OQzNTR3Jybjk1RGdNenVLTUdVOTZiaDVadUkKWjR5aXZIYUxRdGIySFl3bnhrY2xoT1JPYjY5a3JZa3ErQjlNOU45cXJ0MW84N3JCNlp5NmxydW9NQkpaTjJyawovNHRPRkNQR29iRExEaXpwVGR6b2l6VDQwV1htRjN5UU9sYjk3Zk1IL3ByWUFRd01zRitSCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-28T14:00:15Z" lastUpdateTime: "2026-07-28T14:00:15Z" message: Auto-approved CSR "csr-x2sq5" reason: AutoApproved status: "True" type: Approved