--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T14:12:08Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T14:12:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T14:12:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T14:12:08Z" name: csr-cmhhk resourceVersion: "6483" uid: c5a26aa6-75a1-44d1-9f4e-bc111f4a2c88 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=1b79e63566ff0dbdb5451328bd9ddf78242b5795f7c3479cc030e5457b93c5a8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-114.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQVBaMnkrc3p1bWFRTjlJQURYZU9waXN3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URXdNVFF3TnpBNFdoY05Nall3T1RFeE1UUXdOekE0V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpjdE1URTBMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkF5bwp5S3ZnMU1rVzNYNmN2VHNrTkxwTTdPc2RsSFp6aWp5UldoNklHeHgwZEhhY0o2ckxhNVRNODVBZUp5VWl2c21pCldWeFZhenFscnVCai9YVkJJVWFqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBaVQ1NjFDLzU2SWJ2aWJRRwpjaWgzSnlVdFdMYXpiZHlnOWhTR0V5V2MwSE80cGdER1RYRDdad2pDMlZ5Y1NVNit1RS9LSUY2M3hCMHdmM1ZKCm1ON0VUakFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBWG1QNW40K1hiaDdRVjhDZy8zcXJBWWJNcTMwcHVTU3QKRHdTUnBOdHRtdTZUb1BFcXNxRU9oNVJiNWJDaWkzTVJPMGNYUGNtV1VOMVY2S2xPNzhoZVgvVmFDZ29iVThPQQpEWlM5WXIvNGhybnFYaDNTTHR1ZThOUHlXNlZkWGhXQVFISm80OHFnV1JMWHNQdDJGNjlNOWV0Q3RHQ2Nkc3ZFCjdZUHVTSFViaU4vbWEvQWZKTW5XTzRLZjNRbm5LZ1BzaXc2cUloRUxJNHc3S1Z4TDA1WGY0UmxYY1R0T0lYanAKSG1ZRUxic1hibDcrelo1dlZWMFhqUTBGYVl4RmwrQ2dWL0xVcktNY3Q1ZDRVdmh5T3hJOXMyMXB4WTlKTWpZMgpPV1FzbmVVRGc2OTVMQXlGUWw1emhnZ2U3M0ZiM1M3SFVDbThJVDNYOHJMQnBUMVhPU1Zjcnc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-10T14:12:08Z" lastUpdateTime: "2026-09-10T14:12:08Z" message: Auto-approved CSR "csr-cmhhk" reason: AutoApproved status: "True" type: Approved