--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T16:09:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T16:09:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-09T16:09:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-09T16:09:11Z" name: csr-rqqn5 resourceVersion: "7139" uid: 85eb2d95-2747-4557-9b55-81c532d990be spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e7c02c3d13a60656d9fdfc472a4e0f57dab671bd1c7f6fa750009cb4ece47911 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-81.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQU1NamdYV2JjK0FiYnRQeVZLeWthMGd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09UQTVNVFl3TkRFeFdoY05Nall3T1RFd01UWXdOREV4V2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWpndE9ERXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNjRKKwoxWnVickwrN21RTkVZUE43SExnYm5XTHFlTEp0M0lPbThOandtaktRcHErM2FmcFZVSHRHVXR5cUJERm1LYWU3CmdxM04zazhDd0NBbGJyeTJSNk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUF5WU9SNGJ5Y2hlU2QxN1Q0cgoyS0ZxMkdTbFNpdVpHQUZuSWtkSlpTdEpTWTdEeDRrNmJOYnlvUDBHL2ppelVZVTZqYXVRejZxRGZEeXY0V2VDCnJsU2ZNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUFQZkd1UFp4VlQrR3ZIOUp1ZjFZZCtzaVVEeStURXU0OFAKUWgrQVBUVjNRYVMwR2hWaUprWW1iK2ltY0hoeUc1RGd5cE9vTmVGTG4yd0MvTXc2bVc0ZHlleU80TG0xajFHUwpTN1plWkJkWDJqeks1K3U4Um5lWXN0bEhNWHE0bGp1UUEvc2wvSHBYVTM4VzRzbGs2S3l1Z0xvWExtNys2L1p6ClhEdDQ0VWdia2tQQ1BXbm51L0Z6OG5iM29aZ2NpalBuS3VibU5jSmg3aXBmTWhMMDFxeWdiWStpZlhPSWdkeHUKc2xieTYzeldjTTEwSDJBeDJEOGZwQngrSDFqZ0lUakVVc2ZpWWl1bWcrMFVFdnZNQ0tNdWVBZVNTMGJ5U3M3VQovbUI2WkpITlR1KzB3TlBYREptdlJuZE5vdEFPL0dnV1J0U3ZhcmhPbmJGNVh0ODBIVS9nCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-09T16:09:11Z" lastUpdateTime: "2026-09-09T16:09:11Z" message: Auto-approved CSR "csr-rqqn5" reason: AutoApproved status: "True" type: Approved