--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T18:05:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T18:05:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T18:05:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T18:05:43Z" name: csr-jds67 resourceVersion: "6051" uid: dd6b648a-1352-4cbf-9d4d-5b8e4892ded7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=55587301c86c0e301245cb771344901147541d694ae4a13ff1c3f4faa0ed5e97 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-143.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUt6WnhtR1ZRZi9HYzUxVUFYeU8yYk13RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05USXhNVGd3TURReldoY05Nall3TlRJeU1UZ3dNRFF6V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpNdE1UUXpMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkFxMAo0UGkzZ3dOUUVnd1ZoUlpCY3B2UC9jUm1PMGxFalFLbURseTl1UnFXWlZqZ2hIa045SDlKNWZicTFIclJVd2dvCmtrbmtQSDBzVlJUejB4Z2RaS1NqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBd2NwWVlGeHBRSTdpNnVvdApsWmtwbDZqWkdubFBXN0xVM3djRTBoZmxuelgyMGFIYmkrTWpLRUNObW1oaGRIS1M2WWtNaEhOUkxxUU92amE1CnpESTB5REFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBaVM4aElwSEhXYWZHd0pPa2RvSHBBQjhpZzl1UkFTMzkKbTB4R2xaK2FQL096ZkdrYm9PTXcyVHpBalBCQlFwVG1ndlM4TDR4V1Y1NEFBb3gzSkxlNWVnYUIrZDJSZGVxSApLYjJyUDh4T2xua0tvclZBb0t5OGlmNCtBaTl6Y2JpcXlxOUNCcG9ZYXhBZS9nNmY3OElRb0UxMlhEN3QzR3orCjllc0hzcmdnNlhrU05FUnZxelJob2I4VmlYSU5MZFdpQngrWTJNOXVqajFtdUlWZVRUUFUyZDhXVjJ6MXFrSEMKVDRIOEdRaTIwZ0szQXVhWlhGZVI4eE1EZFpJZ3B2czZ0dmJrSXpHRlZqNUlaZXhTZGdKSFdRSnZwdzBCSU16VgpnTG9kbE5lbGxadUFSM1ZvR3IxcFBQOUVXUUhVRmRuK296V1FISmpFQ2VVNjJKTmhXMzFqMHc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-05-21T18:05:43Z" lastUpdateTime: "2026-05-21T18:05:43Z" message: Auto-approved CSR "csr-jds67" reason: AutoApproved status: "True" type: Approved