--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T11:55:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T11:55:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-09T11:55:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-09T11:55:42Z" name: csr-kgq5x resourceVersion: "7417" uid: 630a6ad5-65c0-403c-91ad-0da7183aea59 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f4f1dcc1eba8afde8235582369cc79f2a7ebdbd71afa646fd45b8a3775f832c9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-91.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRSlR3akIveWVBRWFwSXhadUNnbUxiekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1Ea3hNVFV3TkRKYUZ3MHlOakEyTVRBeE1UVXdOREphTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURTAKTVMwNU1TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVQzVzF0bgoxMGNUbzBDRUhQTFYyZnlOdFJHNzBKZk43UDB2S3p0azJEV2JrY1pNU3ZDc0FWeDU0U3NnV0FTc3Bqbm5PTmxmCi9tYUtFbUtkZDVTNkppU1JvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRRXgzZ1pUT2dPTlJQRlVrbGpCUwp2bXRSSkxndHY1NVNLWSszT1hyNjhOTWk2TnQzdC80VEpXUEtZWEQ1ZExRN1BLTXZZbFBsbDBCMWZvYkV0VFB3ClZvTXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBSXZDTGFWOFZqRkxQcHNGNmp3alUwTXhLOG5yYWN0ejJrMzgKaUhhRFVCN1BKUnA4anpFcUdTY0x4V0sxd2tMaFBMdDJIbVNZTE02ZmI0TEluRWozYzM4WlJkOFlQd1M1Qmd6UAp6S1p5NCt3amRkMVJlQ2F4am04Qm96eVZQYTJKeHJ0TXRMNE9hcWd5bHpVWkkvd3BnRE8yMklwMHQ4N2pUWEhrCjduZWN0MnZiblB2emlaazc1YXNVM0toTy9mOUVKdE1TWngyakorMDZiMlpnY2pMaXdGWGlmRVR2aTRPZjBmdFUKVWhKSTd4VnE5cHVUeVFiTHFpcGpCTU9DRklZWEFzUnRzcDdRK0kzMlcwaDhENGFYQmNOcHpwdXVzTUlPYklkWQp3bDRsWks4Y0t6cTdqM3I1dkxKWkFaeXdCMXJFREtqQk1CamV3cnBjdCtVWjErYnpsRGc9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-09T11:55:42Z" lastUpdateTime: "2026-06-09T11:55:42Z" message: Auto-approved CSR "csr-kgq5x" reason: AutoApproved status: "True" type: Approved