--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T15:27:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T15:27:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T15:27:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T15:27:05Z" name: csr-8qrtf resourceVersion: "8120" uid: 2a421e2e-aeeb-4a40-b693-4bde94864956 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4cb5ceff37590aae81ea4dff6e35cd6974cce04d1d4bef82b0e9cef548da42d1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-248.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T15:27:01Z" lastUpdateTime: "2026-07-09T15:27:01Z" message: Auto-approved CSR "csr-8qrtf" reason: AutoApproved status: "True" type: Approved