--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T11:38:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-02T11:38:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T11:38:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T11:38:24Z" name: csr-rk89m resourceVersion: "7910" uid: 975d82b8-3146-4833-bd03-de1372f7c5fc spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ef34e9c8280c31f323e381c79397d74580dcab87c048fbc7a891123efa7b82e8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-228.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRTWdPYS9IM1IzZUZ6cWJvc081T0taakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01ESXhNVE16TWpSYUZ3MHlOakEzTURNeE1UTXpNalJhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXkKT0MweU1qZ3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNCtRQQp6RUt0b0RuNE5YVXVXQ0F0dm1OZnBlTzVscDRFRGV6d0VacXJaeDhiWUJEbXUzUU5zY2lSS2ZPaisxZklJNkN4ClpuS2k0M0N3Ny92MmVsaWtXcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFNNG9JMzVMN2JHVExTaDJyNwpmTVhQWkhKYjFtb3NpRjZUb0VWeko1dUwxY0Nuc2QzM1U5UE9LY3VQSlU5R0JTU2F6YkNVQktlM3dqMExZQ28zCjR4Mm1NQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUURFekVtWXhVWnRja0Y5VitIWHRUd3NrTlZ5RmpkZjhZYkUKNXpZMy9RYkJhUHdtZUJrM0pSSngwYWIzcG1FTVpYTzNlYXJoWUQ2aExXdzNNQUI3OStvejNWNnNiOENBZ0hPbApUSU5mRFd2cnV1ejR6WG1xeHEvN1F2amdDOXFMTkp4V2x2MmEwZ2d5bUowUVFxWmlPRVozRkNYb1B3YlkxeXF3ClVFS1crVXpwVjRoQVljNm91a205b0VZRnJOOVFjRGVDbHdaYUVOMmRUeDNPa2VMaVZ5YXVYU3Nsbld3SWg1TGwKeGhOTnBrVHlvYkFmd2Y1WFo0R0RSbURheGRRdm1aNStqc1lhQVdFcW9jUVY2MUFNYVRrQjdNUGxJa2l3L3lEbQo3SUUydkVjMUJZRkRhRWZ5VTJYSU5FUEVDMVpjL0loUEVsejEwUVhhUTl0Mno2YWZCQUN3Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-02T11:38:05Z" lastUpdateTime: "2026-07-02T11:38:05Z" message: Auto-approved CSR "csr-rk89m" reason: AutoApproved status: "True" type: Approved