--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:03:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-02T19:03:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T19:03:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:03:26Z" name: csr-zjw54 resourceVersion: "7786" uid: aa3da657-7285-4802-85bb-c5348e34f233 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=556670361c63f5c70506ad7976829c1861fb1a7fd0b7374e524714629adfaed8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-150.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRZkhDMk5zT24rWWlETmI4UWNlWWpWREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01ESXhPRFU0TWpaYUZ3MHlOakEzTURNeE9EVTRNalphTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURTAKTWkweE5UQXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFRVVtTApZeU5weEJLc2g1aW1rNHlWRFR0YTVWT1N1S3NNUWtsNVJ5WDJab0VLQjMvYmM3K2NpV3dTRWE5cjVOOHlTdXE4CkdGVzFNY2xvRnJFVzMrSzl0cU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJld1BlcUNrNmtIQ3RETEtSeAo3cG53M3kyb3paR2pPcHllemJKQ0FtWXJzRDh1cFZuOFZmOTQvZEZYRUs2TU5SMm01NGVwVkJDaENUYzEzU0JPCk5GaXdNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJWQzRBY3gzc1BkK2ZweXA2bFBzYWw5RWFyTGdzMU51bkIKRGdVTzNndmYwVW5jckxEYytFOG5ONnlYTit2dm02bkZqTkRhQzRKc2svSll6cS9VNzNvRXdIMHc1ZkJWZWxUbgp2MTllWEc0alNjVVd0SVU2TzZnUWJYdFRNOHkwYTdPcWdvWFlHM0RrclFBSjRuMjl4SXdpMDlTYStTSDN4VjJmCk9iUmJDUXhmSUdEajEwbnIzemdCazIrUWkzUTR1Uk00VW83ZTJZbUIrNEJRazA2NHNLQThQNzV3R09YMGxSWWUKTXlTTnNKNVI5K0d6NXgrRHJpa1dneXZpcEtkZGRVVU0zWUgxVko1YzEyd0RCRDZVR1JoMDM3dldBVjhNdVN5MApMU3Jrbm95ZXdLcmVVRk5wUjRSb2lody8yY1NRZlRFVWpOSXlTSVIweFhBVklDazdxSytCCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-02T19:03:17Z" lastUpdateTime: "2026-07-02T19:03:17Z" message: Auto-approved CSR "csr-zjw54" reason: AutoApproved status: "True" type: Approved