--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T20:09:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T20:09:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T20:09:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T20:09:18Z" name: csr-vl7vg resourceVersion: "8089" uid: a9d66294-9c8f-4ce9-958d-f2b51dad224e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b4496756ec1f5c52b8dab8abd63f15b05f5c4ce613613fa86d2ca56ff8790386 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-106.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRTDQxVmE4di9rUmZjQjRPaWxPeVVCVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UQXlNREEwTVRkYUZ3MHlOakEzTVRFeU1EQTBNVGRhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTXkweE1EWXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFcHBxYwp5NVZBNERPUG4zSkFOSk1sSDZBT1E0a1ZySVZMd1htYWJkTEYvdlFFOFBTOVB1b0RDblM0cVBIbGFjcTdKZU1vCkEwVjU3MmJXV2RGd2t1Q0hpcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRURPSzZkbkxPWm5rbFNHTWI2SAorMUZ3RkFXRC9iV2VkUlYxQ2wrVFE0ZVYvNVNFNGNBQ3dud0o5dStXd0xjbEY1THhQZ2ZLT3ZoQWUrbm5YM2VUCk9KWk1NQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJSMWtldmFoVUlERnJXb3pabHIxc3FweDhqRnVPTEczSm4KamVTaXBzTnhEcDJEd1NtUS9FVE5vTG44UTM4K3AxTzdXRDZRODFOSXVGMy84SkNuWE9wOTE1UVZZb1loQnJRZwowbTVrT05Ub05rZVU4WG5idmRKNURCdGloN3M4Z3hFK1hBMkZhQWNxdlhWN2tqQW1SL3RnemU4RWx6THBZSnNqCnFQSDV5NmgxMmUzekYvRnFyOEs3TnMwWWZYZERjR1ZYZ3A0bmZqSk9vclJZMSt0eWhrUTJ2SGNVQmpsQlYwRksKVEdMWk1uUXgrRFVSdWIrTUh1V3VwZmR4eS9ieXViajFxT2Q4cXRWU0d3cnRYOWVTM2ErSG95cGFZRE1xaEJiTwpSZEV6b0JVT2JXK2VZRG5aVnQ5Zys5dG5lcjgyakJKK3JURnN5eDAyYnhMODY3N2JXV1BRCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-10T20:09:00Z" lastUpdateTime: "2026-07-10T20:09:00Z" message: Auto-approved CSR "csr-vl7vg" reason: AutoApproved status: "True" type: Approved