--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-12T19:23:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-12T19:23:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-12T19:23:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-12T19:23:23Z" name: csr-89w67 resourceVersion: "8127" uid: 29cec1fc-abfe-4757-b032-848a1a1bcbb7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=555ea9281364436171d68378db161bb06154cdf131c295923ae947acb5d15e8c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-48.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-12T19:23:16Z" lastUpdateTime: "2026-06-12T19:23:16Z" message: Auto-approved CSR "csr-89w67" reason: AutoApproved status: "True" type: Approved