--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T13:02:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T13:02:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T13:02:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T13:04:09Z" name: csr-l49sd resourceVersion: "8506" uid: 54726645-69b7-496a-81a3-4f0f66a6b1db spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=01102e51be7d911c9514c79574422124bbb72ae33878ced3487746ac4841c45c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-58.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T13:02:42Z" lastUpdateTime: "2026-09-18T13:02:42Z" message: Auto-approved CSR "csr-l49sd" reason: AutoApproved status: "True" type: Approved