--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T17:47:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-07T17:47:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-07T17:47:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T17:47:31Z" name: csr-k4pjt resourceVersion: "7892" uid: 45d20f76-f134-4473-ad77-dc72c0472f15 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f039d9dfd334c9bb21e51bf60822019b2d58f654fe0d7b1e8b3e43c3b008a3cf groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-139.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T17:47:16Z" lastUpdateTime: "2026-07-07T17:47:16Z" message: Auto-approved CSR "csr-k4pjt" reason: AutoApproved status: "True" type: Approved