--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T06:26:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T06:26:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-21T06:26:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-21T06:26:27Z" name: csr-j48sr resourceVersion: "6009" uid: a199d247-43cd-4710-b86b-4eef8cf3d4db spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e05ccbe29158ba723c5c5f3b47baa814e27bb0a252d90f412ce260c439c4a131 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRUQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNemd0TmpndVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFbWc5TFM5K0h0RmQ2SGFxT2ZnczJ5L0FRSXlCZjFjaFYKMlZSWnFObzFCYjRiVVo2TUpWLzEweFBOVkRIUFhJeUg0ckRuWXJNZXhTZTBJaDRMT2dqL2dhQUFNQW9HQ0NxRwpTTTQ5QkFNQ0Ewa0FNRVlDSVFET3FEdGVZaUQvbkI4aUd6bUFGbWhteDhJWUtWRkNoWmhVc29MeUliS1R6d0loCkFOSmZXbXVUSW9tRDVEUC94bEJnVmh2RGcrZFk1bDU5Y1VhcU5xQW15dEZPCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-68.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3akNDQWFxZ0F3SUJBZ0lRS1hFM3U3NXpjc2R3bitobGhJSnRJVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBME1qRXdOakl4TWpkYUZ3MHlOakEwTWpJd05qSXhNamRhTUZFeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOREF5QmdOVkJBTVRLM041YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKT0MwMk9DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVNhRDB0TAozNGUwVjNvZHFvNStDemJMOEJBaklGL1Z5RlhaVkZtbzJqVUZ2aHRSbm93bFgvWFRFODFVTWM5Y2pJZmlzT2RpCnN4N0ZKN1FpSGdzNkNQK0JvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3IKQmdFRkJRY0RBakFNQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRT2p5eWNrZHBqS3ArY28wSHNRWgpwZWluOUtQdEZGWjU3QjUvbzhCTmk5V2JQNkQycHVabEdPWXl6R2ZqM2l0MThHQ2NZSFQ1M1pEK1lId0Y4eE5yCkRaa3dEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBRHhDcEtwWlIyT1liaEs2YzVKNHhaZG9NcmppZTU2a0M1RGsKOGZlTkRLN2pEckpkK3ZnemdGVmUvVkhCNXVOeHhsbmJocnBrT1NralpCajc2Rmx1TFN3MkN4dkdlTDFBVnkzUApraDduWjZwN0tha2prRk0vTWl6TmIxN2MzUmZVWUgzbHN0T3RaSzBzL3RVVko0eDVTTWtNVjlNYm5pQzB3QmMxCmNDN3hjUURFNEhMVFhJMkJQTzJacUJQOHlwTHI2TTgxVmlQNVZraUdCZk4ycDg5VmYzdkRPb05OU1NtL1JzSWkKZktkeGhST3BYLytremdtNC94T055Y1QreUlLUlBVeVVvcUd5MjVuNkZMcStWQUZZdDhRaFNRT2NJaVFyRWlDVgpRTjNod01wZFVzMjFlNTY3SmRMTlRRUkJ1RUlPRFhiSUk3THdFV3h6Nnk0UG5iUHVtRkU9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-04-21T06:26:27Z" lastUpdateTime: "2026-04-21T06:26:27Z" message: Auto-approved CSR "csr-j48sr" reason: AutoApproved status: "True" type: Approved