--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T12:37:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T12:37:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-10T12:37:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-10T12:37:47Z" name: csr-nfl8r resourceVersion: "6997" uid: 3f221a30-d26e-483c-87c6-0edb35e49c80 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=705ce1956b859462e5c629b96eadb91ce4511a8b4b9d9716f9b5765f1c4d5a71 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-214.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU1LQjdKOXF2aEtXRzBNRDJVeDNFY3N3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qRXdNVEl6TWpRM1doY05Nall3TmpFeE1USXpNalEzV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpRdE1qRTBMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkVzTAo4OE12bXNxVGhSK3IxZW1JbllvZysxU0RVTWszK1lqck4xVUhQL3ZrUnB1MEEwd1JuL3o5MzU5ZnZnaHFvOTdnCjVYOGwxREZpNVI5blkyTS9TWE9qZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBV0JleHk5a1dxazBMbkhUTgpHT2kyQS96b0tKbDZLWHNtT3htUnlNcWxEMVJFWDJ1aDliK0VBcElEcDJTTlJ1c0xKK3ludEI0OGlwa0NLbjJ5CkVYSW9YVEFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBQzkvd3R6S1FmamJrNmRRTGhRa1RRODRxLzl5T3JGS1EKeGs2YXpHeDJsdGMzZmpDdzVjOS9IRm9tQnc3SVhSYUhiaVNjNzUyaTg4cWptMktrUC9nUFlHQWp1VEZPcE5udApIeUZOVGxYS25CTnVLc1NKSmd2ZC9CQ2JDckY4NlYwbzdWak45WEhCWVg5RU9ZUDlBdWRVN3JraGJrQzUvS3JtCkdVNkRVeFgwTTBRSWtKVktWMWVzWU81V0hueURXSTU5UEpRa0ZWM1gxMUtzaTA4cFBzR3l0ZEZDK3NnTTRyUHIKTTdQc01vYlVtbVNsNGJ0NEtpZTNCY2RqNVJBazZXZ3M2cGZqSVVNT2xKUisydTNhWW5Pa2ZkVjRyOEJUTHBkYQpPSktUTitVMVpESUZUK2dkMitQVUlUZzZabkxnMFBhd2ZtRmU5d2pRMlNGZURMUFd1VkF6U3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-06-10T12:37:47Z" lastUpdateTime: "2026-06-10T12:37:47Z" message: Auto-approved CSR "csr-nfl8r" reason: AutoApproved status: "True" type: Approved