--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T11:37:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-15T11:37:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-15T11:37:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T11:38:03Z" name: csr-rltjn resourceVersion: "8088" uid: 32f4bef8-eca6-4ff5-af35-0bc578ea426a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=7c0810b57ed652877af02ea7550511b26aae36986d2a2009f92ebd183f6297c9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-110.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T11:37:44Z" lastUpdateTime: "2026-09-15T11:37:44Z" message: Auto-approved CSR "csr-rltjn" reason: AutoApproved status: "True" type: Approved