--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T21:06:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T21:06:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-15T21:06:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-15T21:06:47Z" name: csr-42cx9 resourceVersion: "6489" uid: d223aa9d-d9f2-4ab7-9355-dd383123dd3a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a8bee6dca82b226b7770aed96d43eda615f6bc397ba252189ff5157d7989691f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-60.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQUx0WVplUWxzalNGTlRKQ2FEeldRZHd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RTFNakV3TVRRM1doY05Nall3TnpFMk1qRXdNVFEzV2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWprdE5qQXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFazBzdgpIT0h5WlhyWjhrTDZ2NGhPYmJKSXR5ZlFUKzJPUlh2c0ZvalI0R2pVMzBpRzVjR3Uvclc4OTlBU2diRDlwUFRRCnhTZVNUMFZyUTQxZDl6dXd5S09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFTNWNsZkovR0ViUzhPR25oVQpGYkJiU0NVNm1HT3Z1SHJXbHVFU2pjalNnWTh4b0ZvQTRLNXhtbElQVlBuV04rQlBuTlg3aVlXbnFUcExtSm1JCnFrc2dNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUURMTEhDVzRENjFsUU5ERzRLUUxpK2tCQm1PQzRNeGZTZEgKdGl3UjFJMUQ1ZnNrTWllWXU1bWJ3ZWlwUkNyWFAwcktIVTZDNWo4NWN1ZHFNUjREc0VtWExPNUJOTm5vMDdVNgp6eEdwd0hiaGRQNzVpaURtbEV2UGdFdmlweXE2aDNoUmRnSHBzVjhDcCthMTRRS2hmbXlJKzdGYkRXKzJLWkJGCitvMVRja3pwc3JlWkZmNDNYdFdHUlJOYTV4dDR0enorcjIyZnNHSmFvSEFzcWp4RHdXQld3WGlhdU04a2pyVHoKci9zQ0d1a3lnVFFaRHJDT2VySEdlK01mRTcrcEUxZ2hNUG5Da1FWMXlRRFZEdlNoN2pXcVpvODJFSkRjQ3dnMwpxcytNc09BLzNBT1JKak54MlVVTnRWOG1MdzZJbmk5TThyTTNKMGgvMUJlVFJYSEFCZ1J3Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-15T21:06:47Z" lastUpdateTime: "2026-07-15T21:06:47Z" message: Auto-approved CSR "csr-42cx9" reason: AutoApproved status: "True" type: Approved