--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T17:32:58Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-14T17:32:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-14T17:32:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T17:33:11Z" name: csr-x45zr resourceVersion: "7820" uid: 0acfe301-badb-40a8-87a8-148ec185a6b0 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5eecbd046fbd293cefc7e85eff60018f04b4c0cc78a211daf87194a759d70f60 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-231.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRQjdXbkhDQTF5UUs1Y2VRMkhxMXhPakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UUXhOekk0TVRGYUZ3MHlOakEzTVRVeE56STRNVEZhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTlMweU16RXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFaVVEKwp0RVVFUlEwb0J3Tk0zeEw2cG1lUk1xMVNPYlNKblVhMHpRKzJ6VnMvM0pUSkJSMnVUeFovZVNPd3ppQ05zTDNyCnd5RU9oTkQyZXFZdUxWZzJENk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJtZDc1YUhyUDIxME42NEM5OAplSFh4bm9ZN2VQbXpSTXRjWVB5WmNZUnEwK0JWV0ZQZTh0ZFNsWGFpNklsN055MFU0TGg1cDR6czVTMmt3SmQxCmpSN1RNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUFhZnlIVXFiUUppUXV5MUNHTy9rYlB5bFd4M3drckdKK0cKNE5hOFJJWnJEN2J0R2tmMWN6aUIyNkdLcHZMWmx1TjBTbUhjQmY0elROZ0p2MCtjZi9rM2dpRjFET2lyak50YQpxVUIyVXlWdnk0aUl1MmZnNzc4NVRJVmRTTmE0aXZYaWN0ZTlwNWZyVXRSNzFQZGxRcGRLbnZjTmpyL3Jsd0kyCmdKZW5EWUhpWUROREJMMWpTZjE5Z1J2ZDdlZ3phMFRIdW5qOGdNZUpJanh5aVhaTnBuV2Nnd0ZYeis1NTBIRTUKa0VXTWpGNHEwNkx0Uk9vOVlrc1lGb3BkeGhJcGxPYmNQS1YweEZZVEcxaGlrRlYvZDFJUTZWbEZHbUVRT2kyVQo3VThxZURVZVNOYnRLdFNLdGlSc1VZZDc3b3greUVsTmM5ZDJINmlBRmJYSnBVUGs1VkVVCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-14T17:32:58Z" lastUpdateTime: "2026-07-14T17:32:58Z" message: Auto-approved CSR "csr-x45zr" reason: AutoApproved status: "True" type: Approved