--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T21:57:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T21:57:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-08T21:57:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-08T21:57:45Z" name: csr-rf958 resourceVersion: "6658" uid: 01154668-70fb-4414-9ac5-ba8ee47fe199 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2508aa44a356c52dc15182c24ddbc48f51886028621e2abaa90d5889928c4c1e groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNamt0TmpjdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFdHVURlp5L21zN1owVjlXRVhoNy9TOFAvWGNmZVVFRTYKcFQycjJMdTlMVUFhR3FJem5WejRRc25PN0JaMGZ1eWdXc2ZjQnMzSjFvblNSZ2VybUpNMVI2QUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwZ0FNRVVDSUJPcFBBdGZtVnRheUdWSGl4cHdxQ0VnUnBBMTQwS1pkT0I1VHhMRTc2YzVBaUVBCnNCcEFleU5mYkF1VzJ0NU9IeWdVWHlWT0c4b2h0dWJxaGp0Sm9ULy9xOE09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-67.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQU9MdVRiSXVuOVhKOGhLY0ltOE9scG93RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qQTRNakUxTWpRMVdoY05Nall3TmpBNU1qRTFNalExV2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWprdE5qY3VaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFdHVURgpaeS9tczdaMFY5V0VYaDcvUzhQL1hjZmVVRUU2cFQycjJMdTlMVUFhR3FJem5WejRRc25PN0JaMGZ1eWdXc2ZjCkJzM0oxb25TUmdlcm1KTTFSNk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNLOExicEdreCtmRStZUFNjMgovNnNtTDMwdEN1OUF2bVpOZW1nbWlnSVRMdjljMlppQ3pBUnFTNmJnN01xWitSRWp4OHk5TXd3Ty96aFVTaE5JCkNWOGpNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUFOdCsrWjRxQndTZFdiRHk5Q1M5WUN4SWNGbldBMDdJNVUKZFI3eCsvTnNCcldTV0RISGY1THpTcGtzajRzejFoUHRVUEpmcjhrTjR5VnNFZVk0YzVrK05rQVc5VVVzdGpoaApRTEQ4cjRHVVZTVWpGeHk1aFZ6RVd4OGJoS1ZRVUZ1eE4rN2g3SzE0RUc0VTFDcGtETEhyb3NEbVRsdzNncVNCCmV1aS9hZTZYVXQxWUVScENWaXRWZjlCMjNvbVUyNnRsM0RaMG02a2grdG1FWXVhSWpCYUMxSzNBcll0RXVUTzMKUGo4dFVyWTFGczlzMnptSWhUTVlCUnk0TkdVMEZKa1ljQ1hlWTlCS2FyS08wdlZjSThQRnNBYzNISjNSMnpnbwpVV0RNVU5MRGZrV2JzYzU2dTJ4MHg5UG1DZEVTaTRSVkQ5MEI5QzRlb2J2STJwYlZqcHpWCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-08T21:57:45Z" lastUpdateTime: "2026-06-08T21:57:45Z" message: Auto-approved CSR "csr-rf958" reason: AutoApproved status: "True" type: Approved