--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T19:22:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T19:22:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T19:22:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T19:22:12Z" name: csr-gd8jm resourceVersion: "5946" uid: 3be5b4ec-6a14-4414-ba49-d775201c2c3c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d223ce2903077b02aab74e14ac43cc7453ac5fd2de6381d4ddb9ab217320ab87 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRqQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNek10TWpJNExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkkwcHJWdnVZRUEwTFJoNlBOUXlhVm43YTJHdU9jancKN2ZqdFNRNTNKZkIvZ09mZ1JTQXM2ZjlFUWtoanhrR1BGUXgyeUhab3o2T2lHNXdLQW0rNkxHK2dBREFLQmdncQpoa2pPUFFRREFnTkpBREJHQWlFQTAzOFpxSUovQitZWEJHOXZJYTk4Vi9QOE8wM0V3WnJoZUUraHlJQldKQWdDCklRRC9rckY5UFBVWWFPZE5STzlnUytjdVgyaDRzMnZXb05VUDlRblp1Zi9WNGc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-228.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUx5bTRnVDJPdjhKMG1pUzQ0UHFxMnd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05USXhNVGt4TnpFeVdoY05Nall3TlRJeU1Ua3hOekV5V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpNdE1qSTRMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkkwcApyVnZ1WUVBMExSaDZQTlF5YVZuN2EyR3VPY2p3N2ZqdFNRNTNKZkIvZ09mZ1JTQXM2ZjlFUWtoanhrR1BGUXgyCnlIWm96Nk9pRzV3S0FtKzZMRytqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBUU8wekhOM3NRdFhPaW03WgpFQWFJU0pkNWRMdDdsR2pLbTJJclo1Vnh6NlY1ekRCNHA0NnI3aUlOZGNBSlRUbzBBc2ZtYTVLUmp1OS9DQ3lICjVYRlUvVEFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBVjI5U3J6eXg0UFVEdEFaVU5LbkwxaWVncFcwbW03V1kKRk1MSmhoeHMrclp2Q01NenlCbEtOUEh4RzNEbHhhR1p6K1d6Vyt6QUxUaURJQ2pYL004dThUMThNUWVkSGxDWAo3TFpxWnlvc3FYTTh5Z2dYR2lTTnlqSXBVemgzRjgxYkJJVkwxN2Jlb0l6ekMxcDNHWlBpYmRERmhtVXZkUEZKCm45bENsWWRoT0pYRXJna2hmSW5HdCtRVkgvZnJrbW1Ec1h1M25Vb0xQemptMDdvclk0L3Y2SlVDVWo0RnlhSmMKUko4VkkvKzFMSTFTZUJzUnIybG5VbVlQNHJmMVpsOTFTTjdUSW1xUFprZXhRa2hqS0JUYW1LdmFINHJpbWF3dQpMRDc0YUI2ZStxVXQvYXltdmFLUmwydERzSm1wd1F3WU5Ea2hISmkwNmNqeUUrZUxvbjVhdmc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-05-21T19:22:12Z" lastUpdateTime: "2026-05-21T19:22:12Z" message: Auto-approved CSR "csr-gd8jm" reason: AutoApproved status: "True" type: Approved