--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T19:50:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T19:50:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-11T19:50:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-11T19:50:56Z" name: csr-r787k resourceVersion: "7297" uid: 4abf7a6f-a6f6-4f12-863a-cacf49f7dd6a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=63c7510230b7c10c25586bfd980ad577a2fd5039a34c6c4d1c1c3cb01e94558e groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemd0TWpJMUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkhZQy9GVDZIOGUwaUxwVDhtMlY2WlEyYUFBUGVlekQKRGJnN1N2ZTNQeDVITnl5cjB1WnpTZ29QSlNtYmZlbHFucFdGajMybWlzZ1hQNnBZaEtxQnNicWdBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlCcGFxb1VMMmxZeXVnYmxuaWtRYjAyUGd0bjlZbDRpWlNnR1IwZWhWSmphUUloCkFKU0RxRTNldWZjS3JrZ2J4RXJhSFFmc3Yza0lEUFlrYnZyOTZwbnorVmpYCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-225.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUxtS25CbDVWS0lGL0NGVGFTS29WNkF3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qRXhNVGswTlRVMldoY05Nall3TmpFeU1UazBOVFUyV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpndE1qSTFMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkhZQwovRlQ2SDhlMGlMcFQ4bTJWNlpRMmFBQVBlZXpERGJnN1N2ZTNQeDVITnl5cjB1WnpTZ29QSlNtYmZlbHFucFdGCmozMm1pc2dYUDZwWWhLcUJzYnFqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBT09jem5ZdllkZThwZWN1ZAo3OXk4UndERDlzNEtveCt2WkdZVnFCQ2FIV1V3WlExQlQrdnpHMU9jeVNLT0k2MjltSllGU213UVNHbW93MVZCCittR09zREFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBb0RxUWVaN1ZVNFpzU2VySDYySDVNa1pJVnFrRXdCK0sKWjZLenVrMmtIdE1LcFpRZDBicThZc1YrUTNCZ0VBdkFydWQ2Y055aytIaEtkZTEyd3VoaDNwU3dsRmxKWGxRbgpiWFVmTkVQazlJaDE3WFJzTy9UTmtjbUpLWFUzUDVBT0VEMXdMNW9TWERZdVBheGdOZ0VvM01aemtYMXhOZk1VCnAwcDhRRjJ5UU81TEw2YlFERU1pMWpQWnRzOGVpRlFibWc2L2VNb1htNk1zSFVOeEdDQloxUEd5QjZPak5VaHIKN2xSaDh5d1pac3E5VlU1VE5xOW8vRk40MkV6OTFYcVYzZnNKeG1lTzFIYzN2Si9pWXF4R2dESlBySEprRDQ1Rgo0SFBoa2huRCtreXF5Wk1UcmRUTEhQZ0RIbG44OTEwOHdBcWlpNE14NzNqMGdzN0k5Q3NZSmc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-06-11T19:50:56Z" lastUpdateTime: "2026-06-11T19:50:56Z" message: Auto-approved CSR "csr-r787k" reason: AutoApproved status: "True" type: Approved