--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T14:20:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T14:20:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-31T14:20:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-31T14:20:22Z" name: csr-bjt8w resourceVersion: "7049" uid: 484f0696-935e-4e21-ae2a-1e0e4071b5e8 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=eb4078419a6bd8f880361fa5ef6a282c6c899b4c34897c6e6859165142a2fa59 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-76.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQUsvQU11QzlTSFRZSzg1QW4yYmVKSDB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056TXhNVFF4TlRJeVdoY05Nall3T0RBeE1UUXhOVEl5V2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTWpndE56WXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFY2JyLwpjdyswMW1BMHFNbmZueHg4QnkzbjA0b09uTlVJRkZWRHBwWHRuTjc3L2haWjA4VzNIK3prbkVWT1NVOUVMaVFBClBWY0cyOWpBUWl3cTFna0ZJcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUI4R3hhenNXdUhZZVlEczBjRgp6MzFYelJuT3o1Zi9ReGtHMENsSGdpZlQrNWV2b3FNdkJXdmI2cTh5RmpMZXl5MUVCdm5jOENpYUpFbGkydDVQCmdyYUJNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJRRVBlSkJKdmg2aDFXSTh4eVNzallBSzkzQUlOdFU4Nk0KeWtNQkxqT0Y1SmlONUFIYThJT3k4UzRBSzJPRmhtNE9ZQ2NCYlNXNjZ3SXJuaDA2cVBObXEwSnZORHIvaGh1Uwp6U1Z6SCtKb3FvZmxTbWJvUHAxSWFkMG9pMGhXcG44ZUFqMXFGZWdoSFJXK0REUWFUdktYdEs0N3RIVFdUMFpDCjBrT2hNOVVhZHhNYTRKaFAvaUJXZ3dyUllVTFJ0STluWkdIKzErN1J0R0FQMExsaUZub1NNUFdoZEpKSFRUM3cKQmF2cWovaTg4aC9aRWZTcFRSaUlsUFZSSmlCblMyR0R2Uyt1MzIzbEMzTE1qdkFmVU5vOGhsQUgvRWhPQW1wSwpnc3MzaDdlMmVOYlprRjgwQ2RuNUpsbjYrdE9zYm1QWDF5WTMrMnJVTnVVS3phSjNRZ05oCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-31T14:20:22Z" lastUpdateTime: "2026-07-31T14:20:22Z" message: Auto-approved CSR "csr-bjt8w" reason: AutoApproved status: "True" type: Approved