--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T18:59:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T18:59:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-10T18:59:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-10T18:59:32Z" name: csr-h88tg resourceVersion: "7159" uid: d92f92d5-bb0e-4bd4-bef4-132f44ce9b48 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4df0130f01d0dc266c9a3c39cdf83ac1eaeeffcb23447ed0226181a09f95019c groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhOREV0TVRBdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFcHdYZWNBMFlPTTFWRk5OOXpqTUt4SzBXeGxOc3Q3dmQKME1kYkNGRml5NjJTbnlFT0kvalROa0lCTXNjb0h2ZW8rVXlDc1RxOVhSTzh5UVh3WmZMZVlLQUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwZ0FNRVVDSVFEU3RiSC82akhtQmlIWVFyNlFjdkx0K1FOUko0Y29xNHhTZXh3WmtiMW5Bd0lnClpDSVQzM09OTDZuOUllZWhFbFg0N0FRZzR1eUNJekppVi91ZitLU3lteFk9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-10.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQVB1NzVzano3SENRbmtZQ3NmTFBNYnd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qRXdNVGcxTkRNeVdoY05Nall3TmpFeE1UZzFORE15V2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTkRFdE1UQXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFcHdYZQpjQTBZT00xVkZOTjl6ak1LeEswV3hsTnN0N3ZkME1kYkNGRml5NjJTbnlFT0kvalROa0lCTXNjb0h2ZW8rVXlDCnNUcTlYUk84eVFYd1pmTGVZS09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRURuVW1DaHBxTU5jWFJrT3pQWQpxTEhET1hNakJBc1ZCZGZDQkJRVWxiRjRFblRXR1c3dW5MTnBDUnhPb281a0tCTUUzcTBxOVBHNUNGS01GZ2RNCm5pS0RNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNpeDhhaHRid3hlOEZYR2I0R2FkaEQwdFM0S0dEYmlXZ1QKcXJVdDFuSkI4VzdUM21BalhTZTNlUWxydDRpNy90OWQyM20zQlkrZThzMzRyVTFBSlpQUHNjV3dFRTUzOXE5TAo1amZEd3p0TTZEYXFaOEdwdEh0Szh6ZkxPVFdZejY1MWlhRUxyeHBFYlU5N1V1SDRpNi9YQUxmdjFsTFQyZithClU0K3NBVXM1d1pwTkptL2dyb3JkME8rWHFZUjYrNkdtQnc2N0llbXdUMEw3dXV2bFlUb1ovT1o5VUpnVTYzLzQKWEhuSnVqZ2xRbTlzN2hSL0RlNmVvTEZsV25sVVpUNHlTNTBjSmRWY25pTmZKeGV3ZDhpSmpReDJrMEI5NzRXQgpFZ0JsY1pFWFZXdTBkNFQvblRBYnF1bm1pSmViWGVJVVM4WS9ZalVac3NBT09tSFA1ZEZYCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-10T18:59:32Z" lastUpdateTime: "2026-06-10T18:59:32Z" message: Auto-approved CSR "csr-h88tg" reason: AutoApproved status: "True" type: Approved