--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T14:31:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T14:31:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T14:31:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T14:32:05Z" name: csr-m9d5j resourceVersion: "7692" uid: b280e053-5a09-4520-bf07-40ebbb34b567 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ff33f2de7328aaaa393c175c61c1f40efe193ff9fe55cbc09fb5830169176344 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-101.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQUxlM3VGcmtyNmdxZE5CRDZxV1pIWkF3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RXdNVFF5TnpBMVdoY05Nall3TnpFeE1UUXlOekExV2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpjdE1UQXhMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkNQcApyZ2lGOEJvMEF4YWxoY2ZVT0xpQnUyNmN0UWtXdFd5RE5laWZBamdsS0x2aDlKMy95ZEhTeXdHSmtWYmgwNkJKCmQ5S0toS29hRzQzYkJZRFVtUUdqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBRnRhbTRRaHdXR2tOUXNNbQpiWEQrYnBSNDJEaE8vbmh1SVdyWEd5ZUo4VFU2V2dXVjgzdk9rWWFaNGJUOE1jYUxRaHZoT1NMOVRpVitWMlpmClVKYkZhVEFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBRzRZR2E2OGRZbFVlSFc0Y3liS2xMeHFCb3htMWI3dkYKN1ErUWx4SXZMWlliK20yTU5WUjdJNkU5NHN6MXdBb2duV3RUNWl3OHZHdnhMbjJFZng0UEhzeTRzRnVZS2paMApNRGM4cTV1VUphY21ybTVjbnlFWDdSOFl5RGxZR1JKN1BjYjBUWis0bk90VkpOMHdCSTBtN0ZmdFgxMXRCZ0pDCjhGc2d5UmdJbnlQNWpybW1BZW41S3UwSHV0aldzRlRPTmVBUThDZXBFVUJNdWlOV2lJU3pCY3A0dzNhYjVZZ0kKMk1wb0h6TndqbU9hNVp3VDdlTlJSOTJKeDZWeEJWQlczdGJCdFUrWlpRM3AzZDlDWVY5Tnpic1FZWXFuRm95bAp0Z1lYSWM1Y3FscGNOLzVFNlV0Zy9icWZQWmlyVzhkc2JxcE9aS3g2RjU5T2NtRkZDY0xONUE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-10T14:31:49Z" lastUpdateTime: "2026-07-10T14:31:49Z" message: Auto-approved CSR "csr-m9d5j" reason: AutoApproved status: "True" type: Approved