--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-19T02:42:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-19T02:42:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-19T02:42:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-19T02:42:52Z" name: csr-k9xc8 resourceVersion: "7113" uid: 669b29a5-0249-47f1-a403-d2977d578b01 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=226c157b4573beae554a5a664513b0da89593e788434c83c2803f5089786bc9b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-220.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN4RENDQWF5Z0F3SUJBZ0lSQU15OVV0ZGFaRDhUUW1EN21oU1JRbFl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTVNREl6TnpVeVdoY05Nall3T1RJd01ESXpOelV5V2pCU01Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFV3TXdZRFZRUURFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpjdE1qSXdMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk1jbQp4VlAxeVkrY2JjajBZUGRYdFY3bGRGMzlKazZQb0psMjJOeG92MmYzc2dLNlBEdnZQdHNMWmViQTN5ZFhPbWMrCkZTRnZJK1MwVHllUE5mWnNFcWlqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0cKQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBYWV0Mk15RzdQQ1UrdS9GZwpJNEsxNmo5dXFXVUZ1RlcrT1lSZFlXcm9jNm5UNDdZaFc3WFdCZWJuS09lUmFtcmJnRjE0MmtqOXdkNWFnRjQwCkpXZjUxakFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBTnNraWtCeDJ0UFo5bmJjRzZheG5mVkZBTmZPVElrSlQKdDl6U3hmVWNGWDZadEFUVDZ1VEJlVDNNRUpHMnJJbnJ1MkJOVFJPSFQ3V2lGSGJ4MVZVSXd0Q1dkWVlsaVZrUApnMTBERUNFMlFjQ2hPcVQ5M0lJc3dPSlhzUEtUZlpnWkUwRXlEYWgrMkROR09kb0hhMis5b1p2eDR0RUtZdkNkCndJUk11WmNCTGVFY1FtTTRvNDJ1OE1ic2JsNm9CUS90Skd3R3VjSi9UTjRsU0puOEJjWXEveE1CSGR2eGlyRDYKbUM1Q2RXU3FvMVA2Sk1FWjNmWXBFZVlwSDY1NTlnRmtOaWMyUk5tY3J0MFNSUkllU3EyOGZ5ZWcycmY3Zy9QKwpWVEkwM1FtaXpsd29qdVdjNFBSdVMvN29wa3ZEVHh2K1FkdVM5VVBVNHFSQXh4Mm92NDF0YVE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-19T02:42:52Z" lastUpdateTime: "2026-09-19T02:42:52Z" message: Auto-approved CSR "csr-k9xc8" reason: AutoApproved status: "True" type: Approved