--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T22:18:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T22:18:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T22:18:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T22:18:40Z" name: csr-lf5jg resourceVersion: "6786" uid: 7666446c-4ad5-45e5-8c0c-b97ac34f511a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b5f5c7600a910bd32331902dd63f443dd2329da4580b2b9d231f9e541635f704 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-64.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRVHVadk9KeVNSWk9CTFBobWtRbVFmakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXlNakV6TkRCYUZ3MHlOakE1TVRFeU1qRXpOREJhTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTWkwMk5DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVIwbkYxNwphY2R3Q3B6aXBIS2Y3Zmdacy9va1pxcDFvdzVwUnZnbnFyYkQvWGdPSGpJbXQvdTZaU1JvYmhCTDh6Z1UrRlNpClZYR0dDNTduRytBZ05kd05vNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRQnoxS25Jd0NWZUVOVFJ2MnlDRApHK0dJeTJ4SCtMWnE5QlloU3psN3NNWHVwWTlDYUdOR0IvS3lGbjR6WmFGTkYzMXFqcTRaN1pOZjJBVzh1L0RxCjNyQXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBSk1XWHZWNDdyM205UzZTNzBPcTZTYU9OdUt4c2IramVLakoKV0NabWw2cTZOTGhjNDUvU0JuZHZWOWpwL1RaclVTaFp5Qkt1VW45WE1MYzlkY2d1dUlzZHF3NjlUVkUwNjFIWQpkZC85elE2aXUwemJCN2lKdGlvZURPcFp1NFR4aGhQNlQ4WURMUWFqSVRtc0E1cHhoRmpnT1hZYWR0Ynh0QXJXCjlOZkI3VDZ2bnFDczMzOHVoYlNKTkU2NzEwdzdPTG5ONUpkOWF2R3JRc1RvMlppS2FZZURDUzQzRjR3VUo1T0YKVWJ3RlcraGNUTDd4b0hjc050UXM2TFVZVFkyYUdMZVZ0RXExaVVyVHpmcUR1dVZqdTd1NjNXRUV4RFpCd05hYgptRTZMY203RjBCYzBSWjh5NlIyT0R5ZEQvSFlpMzJJbVk1OVdjUmhrMjh3Tno5R0dQaUk9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-10T22:18:40Z" lastUpdateTime: "2026-09-10T22:18:40Z" message: Auto-approved CSR "csr-lf5jg" reason: AutoApproved status: "True" type: Approved