--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T21:02:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T21:02:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-20T21:02:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-20T21:02:49Z" name: csr-dl9ff resourceVersion: "6621" uid: 5289002d-1327-4dd4-bce6-c3abd0375503 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=783e70ea72cd5dcaee625a42fdb63ebb19035101812ba76cd733c50adc4ae01e groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNell0TWpReUxtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkFFVHkyU3dSRnhOOExScUhJa3RYR3M4WWU3RUxOa2gKR1NkU2lzcGRwb0lBZ2VyNzQxUi9ySi9BSCthamNCWUM1cHFKL2c3bzVwQ0tWV0JuR3E5N25IMmdBREFLQmdncQpoa2pPUFFRREFnTklBREJGQWlBTi9oSGFxYktST1F2RXkydHl0NG5JUU9CWFZsRDNjdU9MR0JCOG9NZnI2Z0loCkFNOUZUOW1MbnFuTzlsZ3hJUlNSMERqcmkzeXE1UloyeEtrSEUrSDcwOXZlCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-242.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRUGZFWXFBU2hiQ3dRSEFoNFFkeURWREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qQXlNRFUzTkRsYUZ3MHlOakEzTWpFeU1EVTNORGxhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTmkweU5ESXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFQVJQTApaTEJFWEUzd3RHb2NpUzFjYXp4aDdzUXMyU0VaSjFLS3lsMm1nZ0NCNnZ2alZIK3NuOEFmNXFOd0ZnTG1tb24rCkR1am1rSXBWWUdjYXIzdWNmYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUI4MElHVTRlRFdwaG5kTHFNZgpaYmNRUExENDdNMk1ZaFFJNWdCRlN5Q3g4TG9veW8xZHlYdXl5MkZrOSs4Y2V6a3VManB2b3VwMnk1R3NqZW5ECncyeFNNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNodHovTHRycEpxYW9TcmNWejlGT21XbHExLzlIMlp2QVIKVGZ3KzZOMmI0SFFVS2hwbjcycWZxZ0o2bHNmKy8wUzhvVWpXNUEzYmZLRUZTNHVOd09RZjh4NTY4SjJtWGZ6YgpEY3lGWE5KOVRmVTRrV2tmdE9HRTZaeVNXRUVEekZaaXNzNEZaNVZjdWJnd0NiQVJ1SHp0YXZKaksrMHgwaFZGClhrMUpTV0o4UEtUaFdDUDFKOGM4STZiUXlPb0xZdkxNR2Q4TjZWQWdmQzhCU2pqOTQrdnlaWTE0L0xmZ0dFVU4KRWNkUE9FbGxQRm1ucXZ3N3NNOUtPd0pQcU1VendnaFVqWS92OWNXa25POHM3cDl1WlFBbUkyZmZlWlBTNmFYbApycUNKOXM2b0NtQW1YNGFOeVlJV3hOdlVEWTRsYS9yZmkyTFNGN1ZSY29heXJrMGJSR2g1Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-20T21:02:49Z" lastUpdateTime: "2026-07-20T21:02:49Z" message: Auto-approved CSR "csr-dl9ff" reason: AutoApproved status: "True" type: Approved