--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T19:26:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T19:26:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-11T19:26:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-11T19:26:56Z" name: csr-hkd9l resourceVersion: "7103" uid: a37cfa8c-7369-4e09-b15e-72233fa16a76 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c1b21b7970dc7d10da58937500b40ffd5f0049fb28929fa65d5fb0c14657cc61 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-171.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRWUhjM0VvTmtWZlpzaUZpcE54UVo0REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1URXhPVEl4TlRaYUZ3MHlOakE1TVRJeE9USXhOVFphTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTUMweE56RXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFcjdJaQpncGVRYjVnWHNteUczYU1BNlBqOHBBV3ZsZzQwc09TQ0FWUG5hcG5KdzJGeUZWOFdRS0F5QVJmU1FxbWpNTHNVClpJNWpvUVJQMm1OMHkxSHIxcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJFMGZ3U1EvUVZ2UDBnc2owbwoyUDcwKzNLRTNZeG1IRmxCQWdrK0VZNmdyK1BjYjlwT0l1UklSWWlYc2UyTzRNQlpLSlEvRXN4djI2TDZFTStwCnVMK3JNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNFL0RJOFEwcmt4aVE2dzgrUXNPNzVDbXMxV0xLRW80VmgKVm1WaFhrL3pMMmlEZlRlaSs4NTB0RlJJUG9hR01FT3BqOCtpTjU0Q05PL3JrR1VYWUNxR3BmdlVGeVdGVXN0NQppL0RzS0c4dlRjQTNKSm10NDcvdXRaUHB1dFhmUjdHODlDRDFsWHNGVXF2ZzdNK1FuS3lNcGs3cmxHMkpZMkZqCkw5OVVGVU5kVW9qd3lvN1VsUlZxN1Z0bTFMekJ2L3hrR3RtcExhd2V5bXdsNzBhSzBFeGZaaVNnY1VzSm9vaUQKTGtKUUd5ZDA3SUpyUTRGd0dRR0hPSWsxMXhlOFY0WnVtTzVKMDZCNDFqUmFqcmRGT0Q4cUdiOVhicVVsS3drRApBSy9RUnNBU2RqU0tHSSs1MmNtWW15d1JORjl5V1Y2NW9FSU81akxNSHpIR05GSU9EMmtzCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-11T19:26:56Z" lastUpdateTime: "2026-09-11T19:26:56Z" message: Auto-approved CSR "csr-hkd9l" reason: AutoApproved status: "True" type: Approved