--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-11T23:57:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-11T23:57:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-11T23:57:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-11T23:58:00Z" name: csr-skjr4 resourceVersion: "8106" uid: 17619919-00d4-4b22-ad88-6e8aeaa1f147 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=db529347a262af8fd6f3f74758bc828c8f4a8f1c33f3da276babe7418b813ab3 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRqQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNekl0TWpJM0xtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkhLUnZ6NGJpRDY0bXpJQUdZVENJUVpDUmlJNDVnQVUKMEZuNjU5QW1KQSs0TGsxamhzLzVyd3NmQmRldkM3YVVsRmwrMmQvcVRTMEZqRStvUTdVUGZKQ2dBREFLQmdncQpoa2pPUFFRREFnTkpBREJHQWlFQXM2ZTB2cVBKOXFtZHVNY3BLQU5sRUc0ZWNEbDNxRGJxQ21yUmJzbG9HSXdDCklRREl1YzZZZmRWa0UreFJPaFk5U3ZRQk1nQWV5RmVTa0M4aWk3SkxSakdESnc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-227.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU81MVIyeFlxWWd3VWNtdGdZaUdOU2t3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RXhNak0xTXpBd1doY05Nall3TnpFeU1qTTFNekF3V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpJdE1qSTNMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkhLUgp2ejRiaUQ2NG16SUFHWVRDSVFaQ1JpSTQ1Z0FVMEZuNjU5QW1KQSs0TGsxamhzLzVyd3NmQmRldkM3YVVsRmwrCjJkL3FUUzBGakUrb1E3VVBmSkNqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBZkttanJFZXJSZ1lDeFg2MApLbEFBSVZlUFk1L3c4N1NkcVF3THZ5L3Zpa2x5Ui9yQ3B4cFhZMlBLMW9WYVJzZkhxTHc1a0hSbDZPVythS3NkCnZJOEk2akFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBQmhXcEt3NHJzd0VEZkFiNFNON2NzNTdHajdRcENrY1QKV2hEN3ovNmJjZEhZSkc0UGEzSURzeGdmdTFSbWd6RTl1NWtFV1orZ0pIWWVGeTNIL3FPMXhtNHprZHNVWmQwLwpXWnBKSUtQY2kwTUxiTDdaMzJxTHJLcVZ6R3BJdGtySnZkckwyY1oxTzhHUzVFakQ4Vm8rNmJwaThLak9NaXpPCkFtVUEyV0VXdzljOGZIRytaQ0xZZUdNOS9zMmtwTCt4dEpPMlJ0bFc3VnRNYWIyNVVJbzNuWk1oQTduWE1iWWQKRlEya3B6TTJZa0JMYkNUNUlJMytnSWprcU9XMlQ1djI3Wkg1TmtpL3c3UkxRS0g3MzU5eFE2WjJGSlVWUTlzQQpzZnZiV2p3U2I5VU9WRzdpaThsWStoZU81dldDMU5OeVQ5ZXdyZWNzR2pjRWRrK0xXTGFnYXc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-11T23:57:44Z" lastUpdateTime: "2026-07-11T23:57:44Z" message: Auto-approved CSR "csr-skjr4" reason: AutoApproved status: "True" type: Approved