--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T12:37:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T12:37:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T12:37:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T12:37:57Z" name: csr-jhrf2 resourceVersion: "6420" uid: 97d936dd-b0f4-4edf-9108-594a67bd8ef8 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3ae036cea659a9a534fa3a42d5a0acb799d99a6d4f056cf224f59fa658f20a1b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-193.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUx3NkdXdTl1ZDFTb1pDTHM4SU5jblF3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05USXhNVEl6TWpVM1doY05Nall3TlRJeU1USXpNalUzV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpNdE1Ua3pMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkxiTQphb0IybHV1SVVFNnFTaXJqdmxQS1ZNeDZjOHBGZkNrWDNsR2h3V1NZZHlpMjNhVlpJQ2NEME5JUDJCc2hQdmdTCklDcU41SE9ISjhtUTNBREJvUnlqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBSXArenNuN1QrSUM0aDlMcwpGckVjZGhiL1ZuQTlTK3ZqcHFyNFUvT2Jvb2hOaFQ0Z0ZoY09vc3NUUEcwS2l3ZjcweFJiV2JQNW1tT05PbExxCjRRUzVlVEFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBYzlEdUlUb1ZGeDY2eTdVTzNYKzhhMzRndHg1VThxenMKd294dk1qUUl2dXU3VTJVSHk5dGZSNGZTcy9LRWFGc0VWY2NzKzlZTzhHY0lETEVqNVdpd2ZaTTh6R2JFNE15QgpXQWZVejZPT0x6U2lscTljaTNaWHNTT0ludXkybFFiT1RSalFkcE5BVERoenFGRDBzaU1oNkZnUytrd3FVV3pHCnhPWTVialJIZmtSRXB0STNEL2N5TkNFMDI3MWJvbFhRL1RWK2VuVFpGaUJqUzN2cFdyWXM4bmloVkt3SVJOUXgKaUxhN1EyVlgwR25mM0lnRVY2Qlc5SnJzMDdaeEw3bVZuVXNYc2R2KzhzZTF1ZElhUlJrZ0hhVHQwb2UzQnhDYQpWTU1ZYWs2SVM2YXNGWnI5c2tBMUQ4Q1BDNjg0WFE5K3R0OUI2RkFEUFVBRlBnN2t5L25qTlE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-05-21T12:37:57Z" lastUpdateTime: "2026-05-21T12:37:57Z" message: Auto-approved CSR "csr-jhrf2" reason: AutoApproved status: "True" type: Approved