--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T17:01:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T17:01:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T17:01:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T17:01:48Z" name: csr-ql9l9 resourceVersion: "7734" uid: 52b58842-fa93-48bc-9ba3-27c8d064ccc7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=0faed3b9992f0766857cefe8c9b4dc794df8cfc0c3f1018573ca73769877b97f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-119.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T17:01:34Z" lastUpdateTime: "2026-07-27T17:01:34Z" message: Auto-approved CSR "csr-ql9l9" reason: AutoApproved status: "True" type: Approved