--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T10:01:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T10:01:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-17T10:01:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-17T10:01:35Z" name: csr-nx55g resourceVersion: "6907" uid: 5e32a1d0-9b0d-403c-b06b-02468b40839b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ae10d836e31402738d60b1be5cab4fdf0791edc9e8d0c5618eb9edbea23f2bcc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-49.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQVBld2V3NTY2RGgzVUwyb2xrR0s2VGN3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RTNNRGsxTmpNMVdoY05Nall3TnpFNE1EazFOak0xV2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRBdE5Ea3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFaFBGYwpZMTJIWkhjaGl2M0UxY2x1dTNMUUxQM0FjcGpySnlRMkg1QS9tZ0pjT3VaZzNyQ2N4QWNtUjJBUUIyZnlMZE42CmdTR2xUaVJZR1dJZXZCb3BlYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFXbGV2Zk00bjN6NStrU3k0SQpBdXd6ODN1cjloSnNlWjZGQUtkWTEremlZSnZGVWxmdFpGTEhmN2U3NS9lNGcwbmhOTmJSZkVsZm9GQUR4ZFpGCmIrM3JNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJzV3YzbUV5TXR6azBtdWNxd0NNUkszaC9NTlJoNU5Fb0YKMEsxaEd2WnJnUVlYeWpkZ0FtRVZOLzl6ZzBxNkdXUW1PM1ROTnpkQ21HeXE4UnlBT0hObGRxSXRuVTFOWHVlagpET2Ixa0tDTmxId2RjQTVaaUc4QmN6Y1dPVlJ3ZVNMMnpEU1N2bkp4L1p1RG8vYTFlM0JFby8yRHJsS0lzeW1MCktnWklxT3ZEU3NCWUhQeENJOVplbm4yRkVKZmdDWW51WnJ6UTYvRHo2YkdxQjdCZkRjOXFhRVdnOWJ3TnJUNjMKN24zWE9ZMVJmVlBNaytQRVJZWU1NejVWdEgyLzkyQ1h4NUgyVDQzdHE3UGp2UllZMnJYblA5STNCYXZzZFhVWQprVnEwV0VPOTFlTFNtMUwwTUUvcmR2c0FrWmJwZWRQVjhjckFTMGlERExKZnEvTWhIRU52Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-17T10:01:35Z" lastUpdateTime: "2026-07-17T10:01:35Z" message: Auto-approved CSR "csr-nx55g" reason: AutoApproved status: "True" type: Approved