--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T15:08:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T15:08:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-28T15:08:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-28T15:08:12Z" name: csr-662f8 resourceVersion: "6682" uid: 6a159357-873d-4dda-9ebf-b91d37a13264 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2fe07cac23a750b4a6c8a7c58ac42fe99ca974b02850f6196586c7ec3e20a1f4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-61.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRRXZNc2crY1pCQWtzNXRmYXo4SWZhVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qZ3hOVEF6TVRKYUZ3MHlOakExTWpreE5UQXpNVEphTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTlMwMk1TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVQ2NlZicwphUkRuY1lJeU1MOWRCK0hhbzNMbk02RUgxcWJjWEd6aXM0ME5qZTYxQUVySkw5ZmFmY0NybS9nNjNjaHBmUitNCkp3RGZQTFRnY1BsWEJ5YnZvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRSjVseDFjNWFmcTBMeE13VEpodApzRXZMUlNIaDl4MmNOV0orb1d3QTZldWNScGJXdFJWQVNyWC93Yy9jTXdHa01WVGZpRTlrU2NxQnpGSUhycWxBClp3RXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBSFc3K0RZN2lWaTNiVE9uSEZ5QTBaVmtxa1Zsc0tBYWRRUzIKdnVieFdVOUEwaW9LQVFNVUhsdHFUQTA1d2Z5b3V3ekRkcWZCNlRqWDR0RXpNNVN4U0NaTjducFIyVVE4RGdVKwpqQVp6YjVjcVJJeko5L296cERQYk9ka1V0ZGQyMlR0aHBCVW1PdkY4dkJCQ0JsYXk1RWVRVjdoTlY4OXBpSlVuClZ1Mk04ODQ4aURjZHpsOG9wODk0T3locGVPaVQ2VVFIdUdTMUJCTE4rR2Q3R1Qrb21hdmphQWZCZTVpMzhWRDkKNnVqelpYeEZaWGNXVDFOS1lOdmFtVWtQeEY3TCtmU3RrdC9DcjMvb0hCQnA4QmlkVFdBNXpLV2JaRUMrSjNZYwozN213N2tMdjhldGJZV3R6OGczWG5yMFVQVFYzbHVlaU0zOGE3YVNVY25lN2tZYTlwaG89Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-05-28T15:08:12Z" lastUpdateTime: "2026-05-28T15:08:12Z" message: Auto-approved CSR "csr-662f8" reason: AutoApproved status: "True" type: Approved