--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-05T02:36:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-05T02:36:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-05T02:36:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-05T02:36:51Z" name: csr-2r9b5 resourceVersion: "6630" uid: 5c825b61-f9aa-43b1-95ae-8401c0fb8c12 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=76fe44b92759483ddd0ab93c9761a8e9b7961cb4f8a37d8dd49bb76046dc0ca2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-4.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3VENDQWFtZ0F3SUJBZ0lRTjlIQUlZVzlONVM2T2JqS3ZIY1kvVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1EVXdNak14TlRGYUZ3MHlOakE1TURZd01qTXhOVEZhTUZBeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhNekF4QmdOVkJBTVRLbk41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURTAKTUMwMExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCT1d2ejYwegpyc1g3TlNsTyt0SW5ydjhlRUg1blUvSkRXR2QzUFd0UHZtZFhxZEhTSVJKZ09Oa2VJTHlWN1djcmNQZmVyajFsCjlycHpXSUJQL1p2NDJSQ2pnWU13Z1lBd0RnWURWUjBQQVFIL0JBUURBZ2VBTUJNR0ExVWRKUVFNTUFvR0NDc0cKQVFVRkJ3TUNNQXdHQTFVZEV3RUIvd1FDTUFBd1N3WURWUjBqQkVRd1FvQkFzZzM2b2hNV1kzdURKbjFKY1NQcQpjY3piRFd4d2FxOW1Ld21pVzU5bWRHV2xiWWVJK2xmMXpTWDhtbTIzM1RJTVF5MXVJZ1VJUFQzeHo5R2Iwb2VICk9EQU5CZ2txaGtpRzl3MEJBUXNGQUFPQ0FRRUFuSTJ5T3UyaXdMaWdlTmVBbk5mR3JFRjREWkhUd2hsV01ZbDcKZWFsLzVDb1dYR2dsd1Nrd3gySjVoYTltK1oweUJkQ0Q5amo3R2dkbVhoYlY2L2N0cXZ5eUl2ZWMxLzdFVVJBdQpzRWhDUW8rZnk0V2JxbFhNOFhZSXp3NjF1NHRJcHRTZVh3TEExcXV1WndBYjQzekRseXNBaUw4bk5BR1REbHI2ClZmWEVVOUJDbHdoa2dRVy9KTmR0SktmVlhIWGlDZmRPVk12NnYyRkRHSFdpUlFhRW1KSlllcnlkMkVRemFwdnYKZGdTTXR2MjZvVHAvR2hiUDBXUmNMSUN3b1dyVGg3c1djb2xrWWx3S1FzdG9BWVNQREUwYXRYNzNMeHVYdUg5dgpNMFVLeXlMQ0w5d1RNUkwxckV3SlREYzkwY29xNnp5RDlCQzQrVklWMzlMSDd4TTJxZz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-05T02:36:51Z" lastUpdateTime: "2026-09-05T02:36:51Z" message: Auto-approved CSR "csr-2r9b5" reason: AutoApproved status: "True" type: Approved