--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T09:05:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-30T09:05:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-30T09:05:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T09:05:21Z" name: csr-k82ch resourceVersion: "8116" uid: 25390247-a154-43c4-a594-d01047409717 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=464784495ad543e2cccc649fc6cf1a07cd6fe38b5ee3f28f9abb4a993ffe1899 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-66.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN3ekNDQWF1Z0F3SUJBZ0lSQUtKZHFIYm1nS2xVQTY1VjMvTXlUM3d3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056TXdNRGt3TURJeFdoY05Nall3TnpNeE1Ea3dNREl4V2pCUk1Sa3dGd1lEVlFRS0V4QnplWE4wClpXMDZiM1p1TFc1dlpHVnpNVFF3TWdZRFZRUURFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHgKTXpndE5qWXVaV015TG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFalhYdwp3eWpPSDUxVSthY0xIeXZ0eFJIMkdvOTA3RUFDZEd2cVhEUE9BRWovSkVCVHp5UWU3TjNlQklCZS9LSHE2dVdSCnNJMElydXJkeUpVMnhjTkRlYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUkKS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNrYm15VmMzdUVyK2FVNFJmNgp0OUMyTjVRUHg3WE1LL1lOamt6QURuVW1aWGRPV1h4cTVBS0tvbjBYc1BTdURIZHFoSDhDOHB3a0kzdlk1SHNBCjhxM1JNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUJVZFhNRjYrTmtubDFPaHJjeEJzbmZwWElJVUN2eGZSRCsKUGdCQkhyeFZIOURjckQ2RjRDUGR4a3grM1BabmtqaUcvck9hbldGWFo3eWM2NmZNczIrbXI3cTJvaXdzTzBXdApNR3Jtd3N5TkR6dXVmZWxhWU1iYW03M3RqcWxDVHk1Q3lrU2dyMTRUWjZFYWRHZTA4Mkc4VEVRd1pmOG5aR0ZICmg5N0RNeHdEcU81YVIzMTViZWdSRVpReUd2Unc0UmJqK05RWlk1KytJb0t5ZE9JOHQ3UGxZL2RHaDBiRUVwb20KOHJ2ZFZwVHZaQ2pQbHhuU3o4NUppcVZobTlGWStBZkE0eThUNVo5N3diSGJxeGdocnpsK3ZVMVZGOEhsZzNWcgpJeVdLZlM4cjZRNFVvamdZTEkxSlpRNW1Jczd4M0xvbTJUSE9QMlg2aWNCTzZKTE82eHFHCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-30T09:05:10Z" lastUpdateTime: "2026-07-30T09:05:10Z" message: Auto-approved CSR "csr-k82ch" reason: AutoApproved status: "True" type: Approved