--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T17:34:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-08T17:34:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-08T17:34:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T17:34:30Z" name: csr-7g85t resourceVersion: "7940" uid: 2d8c67d0-2af6-4c4b-a466-9b9d2a2ce690 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=1959ba25d94a3c4876a78c386c4566a5d23670a3218544dc9eb8a92ea7e8050f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-115.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRSGIwQTdtejhkVEhqeHg1NGZabmlQakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01EZ3hOekk1TXpCYUZ3MHlOakEzTURreE56STVNekJhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXkKT0MweE1UVXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFWUQzTgp4YnhHQ1Z3V3lETmttNzJDY0tvalI5VTFaQk5tand1aWZMaXBzdWVOR09nS2Nvb2N4NzJKTlBzby9LS0o0dmkyClVvVWxXVmUrOXZnOTE5Nk03Nk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUQ3TjJsQ0N3dmdleG1BU211SQpTcEpET2loS29CWUJCaUFmVnEwWVJtWFBISWROeCtoMU51ZDV3YzJFL1lITmRYNXE3b1Z5bVpFTUZtenIzOEVmCm5ueFFNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUEwaHYvQStBZmJ4N1dCRUVESzlSQmd3UzVZRnh3azZtN1EKck16UG1SNVVJWlNlcjVMUnYwajBkWWlaSTdNNEV3MmI5TS9BSGxaOXB6ZldQcklod1Z6Y21BOG92WWpGNTN6SgorTkc4Ym5mb3VzSnkzY0ZuVURQaUJGM2pkTUJpWXRFQmNsZnpZVGF6Y2VjVGRMbk5rY0wrZ1VDT0JPTjZnOU1VCmN1emxVanp6RnlBUXlyR1J5U0REWVhWdnpkdmVGS0RhcUdPclduVXBKdGY4K1pCUnBWcVVFek1aUVJXeGRhWEwKZ2NqcWpLYlAvRjlvVTl2S1R0bk5iVWhOM2I5ak9uVmQzM2V3a0Rld1JrRThndHR6eWozWHdLZUdubGx0aG5mRgo4bVdhY0lNVVFCYVFHd1FTOTdiL25aVkExcElHMytlN0lSdGVyMG81bWU4SDRoZHBYZWVvCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-08T17:34:17Z" lastUpdateTime: "2026-07-08T17:34:17Z" message: Auto-approved CSR "csr-7g85t" reason: AutoApproved status: "True" type: Approved