--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T22:57:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-14T22:57:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-14T22:57:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T22:57:58Z" name: csr-dz5l7 resourceVersion: "7708" uid: a44055e0-202f-4d66-83f8-147d7665fe98 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=cf08d1569319e89bb7c46a2ae84a14d4f0f9eaffc900c95f9ae28a35758dfbc6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-11.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRRkZ4Q1V1NjdDMWlPS2s4NjlGUHhqREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UUXlNalV5TlRoYUZ3MHlOakEzTVRVeU1qVXlOVGhhTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTmkweE1TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVNnbG13bAo0dGh1Rkl5Y2Q3aGZkQStiQjBDVVVlWmJidTg4bFdRa3dJUEpQNXQyVFFTOWFUMys3b1lwbXg0SVV0NHp5cGpZCmp0Z2hRWFFpY3E4WXdLamdvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRQnBBbFRKU3NzOHFycUZYMHB4Ywo5bUpzN1hKV28xRG53WmdzdUF5d1NrL1RHQktWZ3RqVnp6czA4dzZmSVRpTTAyT21RQUhFM0R2QXh1Wk4rT0NSCmt0OHdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBS2VFcHNGUzFPQmFBNXh6eHJuNTZPcm96VmVmSGlYQ0REdm8KdUMzMXFIWXY3ck9aMmUybmFMVVJnTUE0UytmaVA3TEd0NzlXMWVQczRjWjk0OFRjTndNaGtMWHhDeFQ1YzdoUworRThqQURBQXBuSk9kOWM3QXJmTzlVNk15ZS9KU280UTBaaDBqVlU4UlNVTFZRTGhhbWFDL0h2OVM1M0NjZHdRCnJMQmlsenhxTjhYOUl0VG1jZ00vdGhmbW5EYjFETTIrazR1dHZ6cHBHeTcrc296MTJyRHkzZnJpY01rbEJGSGkKdzI3TUdLVUNjdUx0aUk5dHdJYnE2em9nOVJyT3B0TEZpeWhTVzJReUVuTmlZT04xNXNLMFFRVHpqVXg0cDZ3RwpFRGxvWEpHSlY4MTQ4THBGd0xxa1pVVHNWRlVLdFN5dWRWQmNZVWZKM0FyOUxlSjJmRXc9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-14T22:57:53Z" lastUpdateTime: "2026-07-14T22:57:53Z" message: Auto-approved CSR "csr-dz5l7" reason: AutoApproved status: "True" type: Approved