--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T19:23:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-22T19:23:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T19:23:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-22T19:23:57Z" name: csr-h8kzn resourceVersion: "6668" uid: 53057cc3-144c-4e25-a4fa-00fc5b654974 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6f31447f2642778787e338948d61d9af7397ac694b7a15bec95195e85448a487 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-132.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T19:23:57Z" lastUpdateTime: "2026-04-22T19:23:57Z" message: Auto-approved CSR "csr-h8kzn" reason: AutoApproved status: "True" type: Approved