--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T15:30:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T15:30:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T15:30:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T15:30:51Z" name: csr-t58q7 resourceVersion: "7675" uid: 16b671ec-b447-43f9-8ef8-37231f320880 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=33ae4564e15bcd8d7fa44f9f010b4aebbf1682b2311bba0a2be954e318117443 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-17.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQU5IbVNjeERZdFVocFdsOWd6dVcwcTB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTNNVFV5TlRVeFdoY05Nall3T1RFNE1UVXlOVFV4V2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRFdE1UY3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFSlB2bgpsSWtpeHZIRlFBY3VCWnM3L0RRemkxOFYwdVd5K05ENDI2a3Z5dThoVVFuNEkyeC96TVQyVGZPOWhZRlN5eXc4ClU2T1NsZmdDdExCcld5WXNocU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRURSU0sySVFwRWdIblVHOWVtbwpPUW1qWFpDcVJqdlgxZEY0OEtDN1VVRFN4QXRXbnFQYW50TXNkM2sxZHl4RldMOW54d0l3Q2dKSGNkR05LZzVLClhOZWhNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUFqZ0pHTVdIMEJKbXhkMXcveFIxYlNpTmt4VzZQUWwwaGYKL0prUG9TZjlPM1MrbjlrRDEyam5EU2hWc2dpYXZxSWZXZTlhNjFuL010bllxWlo0a0dVNEF1OTJOMmRHSG42TgpnTjc2dVRSS004VmdnQ2pDdTNlSkFMeWx3OVFsZ1h3amlvMTRScFZvNjRhak4vTXcyZlVNNXJjY1RuV3F2NzRFCklQVlAzM1BiTC9sK2hYVGpoU3Fid0o2Z2JjSE0xSjZ4bXVQcUhZTlZTSFNZd2ZGdnNNTVRtc1YyMHEzRjFYajcKbHZUbmlEa0VuVHdBdkxXRFZ6N2t6NTMzU0NsWGRESXhNTFpiRkNOd2pXTFlXcGkrREluenJKOTEzUlIzWmJMUQphcWJRN0NvUGFIM1NUc0VXSmdGdEF3eU9LOUNuWDZnK3k0SjlNN0ZRa0tXSFE4eElSS3pCCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-17T15:30:35Z" lastUpdateTime: "2026-09-17T15:30:35Z" message: Auto-approved CSR "csr-t58q7" reason: AutoApproved status: "True" type: Approved