--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T06:33:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-09T06:33:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-09T06:33:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T06:33:24Z" name: csr-7jgxm resourceVersion: "6839" uid: 31d3eaf0-c719-4385-bae6-5eddf0991caf spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=fc417938cdaed9dd114149449a97ba445f97fd633ebd4a6769bd3eaefb1f9561 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-45.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T06:33:23Z" lastUpdateTime: "2026-09-09T06:33:23Z" message: Auto-approved CSR "csr-7jgxm" reason: AutoApproved status: "True" type: Approved