--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T22:46:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T22:46:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-06T22:46:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-06T22:46:54Z" name: csr-ffp2n resourceVersion: "6724" uid: de860ddd-6d15-48ce-a471-dde98e20131a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=cad06a8d395775cd0c4cdbdb90d3969f7725d2b4b05274117b594fb29dfb8731 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamd0TXpndVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFd2xnYWZCUFRtQUhWSDJRZmIzbEt3VTZoOWNmK0IxRkYKNVhRUUg2TlF4ZGkzRGplU2xwRDBvRGxneUpjYzVvRHRiUTFVTjgwT2Z2VVVJRWZzZ1RxT3FhQUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwZ0FNRVVDSURSUHpHYzFBL0VNSlBIYzU3SWU3TjhrbGRTR2RpS3pkQjVjTWtwaHlleVBBaUVBCi9IM0c5cGV6Ym5qNmxvZmp6K01haVd5SlRMejEwaDdUZlgxaXVHV2ZSRDg9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-38.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQU0zNENwcGJlanFuVnJSSWI0RVo5Yll3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTJNakkwTVRVMFdoY05Nall3TnpBM01qSTBNVFUwV2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWpndE16Z3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFd2xnYQpmQlBUbUFIVkgyUWZiM2xLd1U2aDljZitCMUZGNVhRUUg2TlF4ZGkzRGplU2xwRDBvRGxneUpjYzVvRHRiUTFVCk44ME9mdlVVSUVmc2dUcU9xYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNxTXI3OU5Fc3dKZkU0ZkdPbwphcHpicCt3NlFWcHJPYmFQL2hGZEJnRGpUeFRSeTVRZW1ENFErNnREVGpLZzFuVm4xVmhmZk1QZTRzUUkzUUdkCnZzOEJNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUFLdzhYemNhTFJ6bjJLV0VFT2s0NVJaSGI5eUxNbDF4dW4KNmxoelhVTnQ5OXl0aTE5QWlOYmdQL3JwaXB6Mmx3aWM0ekhqNzNhWSswbGtMM2kxUjNwQ2N5c1Y3MXNwRm5NUApJVzF5N1RQMlRkZEh6WEtQMlMycUZGUTc0SmlxSXNKdU5YQWR2cCtVRGNlYlhMYnpHNTQ4SmdkZ043L09DR1kvCnJHVzNuazl1YWpFYmx1dTQxaEZOMjBjVmh0UnN0NjNpQklsZGVRcE93SHU3R3NjTzk5WjJ1eXhFQi82M2FFYjIKektEY3ZlSitmTExJM2Q5WXNwTmVIblZNdDkybk4rUzl0Y1VHK05ESHRBbGN2azF1MGVES2Uwek5yUENhKzlwRQprSGNDbjlqUUNBbEYrQWhHdXhQZ1lwUnlKc09FcDcxaENlcy9TOHRCOFNYWTZmWkwvaHM1Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-06T22:46:54Z" lastUpdateTime: "2026-07-06T22:46:54Z" message: Auto-approved CSR "csr-ffp2n" reason: AutoApproved status: "True" type: Approved