--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T14:54:58Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T14:54:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-02T14:54:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T14:54:58Z" name: csr-xbxs4 resourceVersion: "6835" uid: e4544361-89a0-4e18-95e7-68b96b068d62 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a5fe4c501b86c2f751ba4dfb13d4e8eb1d3782d30c12876732c8d4e6133e920d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-64.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQUxzRjNTSE1YdHBhTktsclpzZDZOZlV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QXlNVFEwT1RVNFdoY05Nall3TnpBek1UUTBPVFU0V2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpJdE5qUXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFVXlqbQoxZW9IS2FLWWdoNUN1U1UyS1luMG1XRjI0OVhuMEUzbGJFZWxCU3pId2lYNW1JQTZ5SU1WSU0yb05WOW9TM0RoClE0Y1BucFdSdVNYLytsdFpQcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRURPN3l5eGhRRFo1OWR4Y3YzbwphYVZFNWNEZmh0YVdoQTAxNUFwWVV5TFZuR2lkbWY0VVh6S1FBaHpxbVM2TXdFelUraUFEdmhmc2s2R2JjblFJCjVlY1FNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJ3d3luMklXc3lpeXhNMDFxUHlNb05LVzcwbXZJeFpLZVQKYXd3SlZQTXZoUUZMUVA5elN1ZXJud0x2dnp0RThUSW9JczZuVm5TV0R1RFk0eEV1R1UwMWhGNUZLaUFCaVR6ZApzYk1IdjlocER2WWk5TEtqTk1YWkY2M1BqRmtxeWVaVmVWbFNtTnk2UVlhYldqN2RtTWZOVjQ0SFJYclh5Vy9LClF3YnZnMGZUamZCNHk2dytqazJzcjBmMklBUWlYTW9NaGFkdUljbzd6UlZldTF0amgxUXZUWXN2SUpSeWFHZzYKaDlPUjQ1NnYyemIrakZ2Z3FYUTExRmcvNU9HSXZSS09YRFkyQTVUWEsyaHlrd29kUFVaV20rZUJvUzBWVWNUTQpvS2doS2NveFlBQlRRaTc3YVluYU5vTDRSOVZ6YlA2RlRYaFdXWGNLUi8zNG05d2U0M3hTCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-02T14:54:58Z" lastUpdateTime: "2026-07-02T14:54:58Z" message: Auto-approved CSR "csr-xbxs4" reason: AutoApproved status: "True" type: Approved