--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T12:41:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T12:41:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-09T12:41:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-09T12:41:30Z" name: csr-nmhgw resourceVersion: "6648" uid: c2fc04fd-467e-4133-b6c8-6cc4bbb21ca1 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d0d9f722cb571ead6641fc9f3028bdcbb97d43422843043cd85215c2360823d9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-159.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRVGV3QStiTWhTWlVSZEd4VXpKeittVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1Ea3hNak0yTXpCYUZ3MHlOakEyTVRBeE1qTTJNekJhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURTAKTVMweE5Ua3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFWEhoQwpzbkZwTnd6RWZMQmRqbzNHNlByd0VMUXJ6aWgwSGtKeE5PWWVvakNOOTNjZTZ6eTY3M2I5OGZIU25LbmRNQ0xJCnY3aExjZVgvUHh4Q1R1REpvcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUEvMnYySDA2NlZuam5zOXhJdQpoaHJBak40VDZWZGE4OVMzVGlvTklpQW4rZWdKa1IxbXpUblZlUTRYSG0rY1FOVmxBRm9ucTJGRFptWlNxMmdiClNiMDBNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNOaG5sUTZUS3NBZU52UEhKS0M1UEFBNGhkc0w5SncwTGkKN0l4a2lGWmxtaGpZaE16QjdrTnlBWHpWZW0wYTdydVN0YU9wajhEcHNyRXRJT1BsZ2NvVWw3UDlpUkozZ25uWQo3L09mTy85V3c2L0lnb2grNENlWm8vSlE0T2tNOFh1a2dGZHVCS3lRazZNa2xiUEJheTZ6Z2x4YmRZdWowSzFvCldQNG4yRjgxSXJ0c25zNFlLRFRSTEhjSWhIVElrZ0tMOXZ4MUlQRVFvVkljdnpjWVgvVmFwMy9RMXB3Z1FpaTUKT1NVZS95Z2dVSjIrRExOUE9hT0tMMzZveG1JNHFVRUhxSHRLNUtGWWxxSS9EUGg0U1d1dkk4TzgxeDRqN0s5cgpybzlPVjMvK1h2ZXBIbW1vSmtmem9HOXdtYjMwWjFlUVFNRy9PTlU1N2JrZWtNaWVJQ0RTCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-09T12:41:30Z" lastUpdateTime: "2026-06-09T12:41:30Z" message: Auto-approved CSR "csr-nmhgw" reason: AutoApproved status: "True" type: Approved