--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T19:00:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T19:00:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T19:00:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T19:00:45Z" name: csr-kqxml resourceVersion: "6458" uid: 1bb4425f-de31-4b14-ad51-638ff264ee69 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b8fe5681fc9baf89c1f74079f432d6c234747fc8f0b970c2aea6eeb142922c69 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-229.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRU0hXbEdCampxSzk3YUkwV1E0ZnZOREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UQXhPRFUxTkRWYUZ3MHlOakEzTVRFeE9EVTFORFZhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTVMweU1qa3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFRHVNNgpnRWFlaWIwd1dsTGs2d0pib3lYSnZPTmxqc3o5WjRUdWMvMzZ6Y1VOM1pyUm5LTW1RUjAvVVRuMnpRVHNoWFA3CmxHRW40R1QreUNnS2h3NkF1Nk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFVenlxYjNEbVNYZ3dna3ZoNgpDV242R2VBMnQ4TG1SR3pGSXB1a2oxeUtpTUZvckgvUXl2VWpCM1dZdlFhencxNWlVUS9xaWJ1UkVHMEhZdkg2Cm5kMjBNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJnYS9aZ0NVc1dOQ05OQmdNVEd0YVFHOG1rSi81Y2ExMWsKYlhiQU1CNWt2NW92ZDhTQjFyN3BLVFZnZGU2djhiR0ZBUUYyd1RqUHJqVUJhWEJTY2h1NGlWVVdTUklZaUtQcApaUkFmUDNycTNSMG5iWDFETnlQV3JTQUYzSHJXQk9LUm1CUXNhKzlhUFZqd3gwZytvb2VWVGJJRDRreHFLZFJ6ClVJZldndkQ1UWFlWVRPTVF5Z3VabkM1VlZ5cmpOaTVqdkhzNXhGVmREc3UxT1ErRzNsdm5wbTBuM2pqMHFnN1UKZDRibzhPY1hhUFdOVk42S0hNdHBCcU5UYUdVTnJLTE5OYmVMNURXaTdJTW15ZHdNQUJDeFBzaytHZHd5TFB3YQprSFRuV0RDMEFKTUxob082OGxjMk5xbjhzRkZITmZBVmJTQlBtSTB5eWlKdUo5SXJHcnV6Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-10T19:00:45Z" lastUpdateTime: "2026-07-10T19:00:45Z" message: Auto-approved CSR "csr-kqxml" reason: AutoApproved status: "True" type: Approved