--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-11T20:51:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-11T20:51:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-11T20:51:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-11T20:51:23Z" name: csr-jlbvh resourceVersion: "7455" uid: e112ceb3-cb15-4a46-b966-42acf1bb9b58 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=bbfff7eb4f8bc811de64afbf3be320701aa81ac89e5c723bdf310dd929023ae6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-205.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUlLVi9VQm5vcVB0ZXBhdUI1QWVTbVl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05URXhNakEwTmpJeldoY05Nall3TlRFeU1qQTBOakl6V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpNdE1qQTFMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk1xMApnSGg5SmlITWVtMEtvclROVGVhM3ZyVmFvOEJxTXFMZVo0OFpYYVRpQi9DSi8rTE5pSk1MdVhHb3pEVFZkZ0YyCmJRcnNmZVRHczhBOTUzSDNMYUNqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBRk1lL252Q0N3cmZTdm9MegpUZG9WaTBSTWVwME1ZbmdlSTZweHVRMGtvcFVjSE5GNlpPKzZPVFFpUXdXWG9EdTh4UFAwSXM1dUZXUDA5a0cyCno0M1J6akFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBU1gyUTA0WVo4K0E2UW9HT2tQZVo1enRsRkI1SjBnZGIKMS9kV1BLaFJjd0hOODhoS3pkRUg4WmNKMWhLY3kzekc3SitBZkJVTjd4R0Fjb0MvSU9ScHhrSUYzK25tQXlHVAoxaXVFR3l1Y0c1d2NJRlVJaTFIUDFZTi82dzJJb095RTRoNVlPSnZibGZBdTRJZXZTc2MvSktSM1RDd1hmVElRCjRaZmhYVVZuM1RRdldFQ211REpQdWVWQ1JpdmVoSVZLYnlXcUFUekVVSnFXdlJTeDlnSWZSRkJvZ2VxV2h2OGgKc3hCZHY3MjRiYnE2bXNORXRNUUVhTTFQR1RxanpaRGpTQ09QY0piOElscW5yYlVEclBoaHVEaU1ONGU1c3hnWgpuazhUYXdrd25LdlRPeExMb1pJUjg5b0VWVHA5Qm5hdkZ2QTdvZFpDY2JmTUFNN0xJWEZyVFE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-05-11T20:51:21Z" lastUpdateTime: "2026-05-11T20:51:21Z" message: Auto-approved CSR "csr-jlbvh" reason: AutoApproved status: "True" type: Approved