--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T19:27:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T19:27:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T19:27:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T19:27:59Z" name: csr-nfl9n resourceVersion: "7141" uid: 4368e17a-a656-42c1-a184-7ef477c37de5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=238c752fcb5c296107c9cde20f2853493a2965312b788b9bba0077197a050b7e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-235.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQVB2MVRrTldoeGV3T2lOWWZYbTZ4MXd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STNNVGt5TWpVNVdoY05Nall3TnpJNE1Ua3lNalU1V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWprdE1qTTFMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkEyNgpGcHNUbG5IZzhLbmJmSzQvbTJDU1hRbktKQlhkbEpldFk3d1E3YytoQVpUbkh4eWZvWG1UUXlzWDZYTHh3VFJUCkEyWU5hTGUzbzRhNzN2aFZTV0tqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBK0dXSU5PNlNjaS9Ra1BVaAp2U09MTU5LOE5hRExiaUtjUmdEMVBuTnFhK2FrZTE5MjU4R2F6a2pNK3JxRUJXbkdLQUs3MGs1azVNWDJzZytOCnhXSEFwREFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBS1NtSHJ1bTdld2NWUnhxVWlhOVl1MTYycjZxRGl5ZE8KYWdLVjlYMnRGQzZDZkZnK2U3VFZLTGVsVThlNmc5Nmh2MWovVGl5VTRHRmVCb09CT3JJMW8rdE1qenhaTXBESgpHQnFQQmN5cVlrMTZrSXpxOTBjT29VMm5lOGZBNzBDeFcyNTZxVTFlQWk1a2plNFZPZ3E0SDQ3dXdQMkhWR2FOCis3RnFpd21WcVI2bWd6U2J4aHFVdXR1eGpyNXZnSzlIWktiMC9sQ3VsenJkd2NoYjQ0cEtqcHNNTUdXZjI2dFoKQy9CRVQzSWxFd2t2RzJHUEpiRHNNQ1hTR29KZnV5NFRnRWRBVHNQK3RRNExwRVJQbjhuTCtqK1FuQkU5RlBtWQpRSHEzWStoNDdudGw0ZFZxUE5wUnY3aFVnb1ZrcDBGMXNEeWRkV3A0bkpLaTBNSGsvemowSHc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-27T19:27:59Z" lastUpdateTime: "2026-07-27T19:27:59Z" message: Auto-approved CSR "csr-nfl9n" reason: AutoApproved status: "True" type: Approved