--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T09:27:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T09:27:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-02T09:27:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-02T09:27:38Z" name: csr-ks2nm resourceVersion: "6884" uid: 457fb4eb-52f8-470f-9ae6-864e351c271f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c4282c4a7f77dc7114e39a01fa87a5166193533bfd8064e6cceb1d09b5276a5d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-147.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQVBGRnd3ZHd3ZUFkM3RSaXVScW0rNkl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qQXlNRGt5TWpNNFdoY05Nall3TmpBek1Ea3lNak00V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpBdE1UUTNMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkhUaQpCWFlRb2ovVmh0cmx4QkFUNFdZa1V4ZU16bXBwWElGdGRBa3IwZFFaVGlUUFZpN0FpWk10NHF0K3lOYURZdVc1Ci9Ec3Z4ME9vcDNHcy9PaTZKY0tqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBTUN6ZDdPNEg2UDZwNlVWZAo4NjVTYnZ0ZitOdHJkMGN4WUdOVmVyL1FaQ3piME5jRU1yTWs2amNyYTh4bithZzExRkE0L2pVTDV0Rk5HWGliCnZkQkRLekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBc2RBRVpWMWNDSnJCVENBNkFaT053dWZneWhnVUxPOUMKT01VbUt4Vmd5VDNabDdsVkJzVXc3Uk8zdVZyZEttMUk2V3ZtL210eVJ6eHNiSjM3Z2E4c3dNRkJISldxTldTdQpQNzk0MTBCM1A3S3pMS1BHd29ldWZCVXM3ek52NmtXWDF6K01VTTlRNUlDT0JyWDZob0Z3Y2Zzcy9MaWhSYjl5ClRRV0Fld1pySHZ3R21ENDN6SDVpQzRjc0k4MnFOVmtQNU9xbS9YcEhlNXR4ck1jejBlL0YwWlVLWmNPOVZvUDkKK2o3Tmh2TUw2cW5ZcDNBVUk5QVRWYU95bm01VFZTZzlrYXoxT0s5WkJBV1V4eFduZjRwc3hnSVNadHBFMGtMRwpFdEtpZUpmN3ZwRVVPcS9ZM2ZMckNFY1NiUEhqZktLanJ6LzF0SCtEN0pmZkpsdEFqdjZncUE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-06-02T09:27:38Z" lastUpdateTime: "2026-06-02T09:27:38Z" message: Auto-approved CSR "csr-ks2nm" reason: AutoApproved status: "True" type: Approved