--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T16:37:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T16:37:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T16:37:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T16:37:35Z" name: csr-25fg2 resourceVersion: "7812" uid: d72bf504-0324-43fd-9b27-edd9033e1aa2 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c3baa05ffc7c968bc053dd08f936e83132a0dab98c92f414c6c720f1d805c9e0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-182.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lRZmIyUFp0LzJJMnRKN0VhTStEMUJ1REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qY3hOak15TXpWYUZ3MHlOakEzTWpneE5qTXlNelZhTUZJeEdUQVhCZ05WQkFvVEVITjVjM1JsCmJUcHZkbTR0Ym05a1pYTXhOVEF6QmdOVkJBTVRMSE41YzNSbGJUcHZkbTR0Ym05a1pUcHBjQzB4TUMwd0xURXoKTmkweE9ESXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNEEvWQpBWG4yRFFxK1p3V3JyakZKcDZCVmtweUI5UDc4ZHBaM0RLUTJpdElmbDZRbWMyWURXZ3NuN3IxQmFSOGpXMDQvCnpZV00xR0tsNXArK3V6OEJvNk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUN6dDVDbnp2M2xzMHNzYWV3eApLbmlsRGJtcWY2UVZpNnJBZ2ROaVQxTDVHSDJVVFRuREt0Rm0waTRzMmQ2ZmFJYnNrelAwTERxdjRxU2IrUkloCnNwa3NNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUExUjdKeWdxTnlQOEQ2Wk1EeENPSzBDWHVVUDN0ZU4yS2QKekY5U015VFV4cGdSN0NKb3ZUQUM0WkQyampYWEU3TkZIYTNEa2YvTC9UVC8xbWZFR0JmOFRhSjN5RGlERzJpNgpMcVYzdHZtTWJtVzdvK01iTUYvMGNEMURqdHRVZTMwMjNQVTF4TllhQ0huVUwyMkZLdTZKTjN2UEpWRDcwOXNlClVET3BiZmlzbm5aMUVHY0JMTjZBa1RtT1JKUHVqMjFVeG9OVDVKYm5EMVhuWDNnWi9iMjdtZEdjMHY1a00vU2wKeDk2MTlKZnVzaWpnZWV6VkFvSk5iNnhIdDVsdE9QZElRRERrNytEUEVsa3hkdFRpb2tmbXR3RXpsY1ZCdko5WApkN0FoS2VuZHd6R09hS1p1LzRpbnoreS94U08yMkNFV1FDUVhoN1hNL1h3OUhwL1hQMG02Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-27T16:37:34Z" lastUpdateTime: "2026-07-27T16:37:34Z" message: Auto-approved CSR "csr-25fg2" reason: AutoApproved status: "True" type: Approved