--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T02:06:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T02:06:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T02:06:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T02:06:13Z" name: csr-kf44x resourceVersion: "6455" uid: b4071142-d800-4200-8966-1f8441b219a4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=7cb28baff77b9b55b78f240a0c515ffc197b119b6ac0d17ac66ef305cfa2c08f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-23.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRSDkxQUd3bjVyTjhVOFg5bDA3Z2E4REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qRXdNakF4TVROYUZ3MHlOakExTWpJd01qQXhNVE5hTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKT1MweU15NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVN3SXZ6bApoY3F2d3JPUVZ2bGQ1QTdJdzdqMVc0bkhiVnB6S0ZscTBCNktCT3htWU11KzN3QUJPTCtYK0JHOUh2d2Vmd21vCkpDYkxsUkwxU3kybDRFaWRvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRSVpscVhkUkRLeU5mYW5mSWtscApXZEIxbWx6dzMvU3VlOHJqR2VKUGlwdWRLbFpPMzYzUG1iZlB0Z1laVFBnUzZmRCs2SStReEF4T1pKTVErZVNICmI3RXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBR0dHQTJDSUtXeTR0djREL1FTOUVxczZsdkk3WGtwKzhHNkYKVnpXRzFDUWhhN1c5K1d4ays2TEx2VHRxeEJwcGtSdExJS0QvN0RpUXBPRXBnZkZTWUU0UW01a1RmSWFsV3ZTNApSWFdtRWFyZW1UTG5Lc1dsT0l1ZUVQVFAwSWZNRkc4L2RUaTZUN0VVd0M2QWpFM2ZDWEJGSmtBcXRUdWhzY055CkJKVUlMT0NPb3hWRXI2amYzMHFrU2hzdi9VVU5jNmZhN0x4ckR6bDBaMnU4YTVzeUVoT1huaGtvc1dpcFFDb08Kd290ZVloZkQxd3JTSHpLZjg0dzdrK3NwbHdUeXRVMUNTbk1COGhRZkV3eUowZjhNd2lzSVU2dVNORVFuR1FNaQpIWnAxUit1T3lQb0tabEt1M2pZTFZzM1VaSFY5RGdndFBiZHlqUHRvckc1YmZmQ2hnRWc9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-05-21T02:06:13Z" lastUpdateTime: "2026-05-21T02:06:13Z" message: Auto-approved CSR "csr-kf44x" reason: AutoApproved status: "True" type: Approved