--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T19:14:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T19:14:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T19:14:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T19:14:42Z" name: csr-mpb9s resourceVersion: "6483" uid: bf59a957-e908-4b69-8b87-15082adeee45 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5acfd7857b154c57967dbe4944d2e2ac741a421b0fed52be7a78100296ed051a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-212.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T19:14:41Z" lastUpdateTime: "2026-09-18T19:14:41Z" message: Auto-approved CSR "csr-mpb9s" reason: AutoApproved status: "True" type: Approved