--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T00:11:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-24T00:11:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-24T00:11:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T00:11:06Z" name: csr-wz2ht resourceVersion: "6766" uid: 4f2a15f1-c196-4227-b7fb-3f1a26cfd578 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=661ad6df11bfe4e113a5bb389445998e2d81b562baa2d91c5a93589adf3d02ee groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-9.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3VENDQWFtZ0F3SUJBZ0lRTlI5cyt3cWJyUkVDeVpOZndnSng4ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qUXdNREEyTURWYUZ3MHlOakEzTWpVd01EQTJNRFZhTUZBeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhNekF4QmdOVkJBTVRLbk41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKT1MwNUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCQUtsd01tego0TlR1NGltcTFTWWxBbG84N2lFdktqdThIZHdTMUFQMjNoeG5xZWRKREZSSVVPNy8yK1ZDYlJCMHNmeW45QnVQCkViZGtiWWN6dFJ1Wi81NmpnWU13Z1lBd0RnWURWUjBQQVFIL0JBUURBZ2VBTUJNR0ExVWRKUVFNTUFvR0NDc0cKQVFVRkJ3TUNNQXdHQTFVZEV3RUIvd1FDTUFBd1N3WURWUjBqQkVRd1FvQkEzV1Z5UDBrY2x5bWlDWFl6a05QQgpRblc1OUltcGprOVRvaDR3ZkdXbVptUnlqaVl6d2FFU091cEZIMWpCRm9ua0pHOWxZR0RJaEUvSTQ5Tzg3VERnCmVqQU5CZ2txaGtpRzl3MEJBUXNGQUFPQ0FRRUFhOHcyTlZsQlB1eTNkMUdReFhQV243OWtReFMwdENBZWdNWFgKSzRrSVJJcit3eiswMzFuTXlZT3hwNkpnRGlidEZ0b3pkRXRrYnk5K1RGbnZKeUZDcmZoazhFSGh1NkdRSXgybgpaNjlEZXZnSkhrbnR4NSswY3RCaG0ySEE1TmFQdndhY3dKTGI2dHJFOXpoNUpZWjlCSmtUZVQ5d1l2Uk9MUE0wClJXSEp2eW1ZTHRiaUV2R2czU0hwVmhES0ZUTGhGVzlBZXF3UU5sdSsyeDdNdW5BVnFBempNSDV0Ukhrc0VLNHQKRVJpQllOTERNR01oKzVLZ01MTUdEUlhHZkV2aVA2bFpCU01Mc1NyRzVrZEZia3puMmZ5dkJSaExrQmpQRVlpawpaeTlCMTNyRlB6SHg0ZG5rVm9XbmNubGlOeStWejVRSzFMemNYL1JvQzAzQ1JaWkc2dz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-24T00:11:05Z" lastUpdateTime: "2026-07-24T00:11:05Z" message: Auto-approved CSR "csr-wz2ht" reason: AutoApproved status: "True" type: Approved