--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T19:38:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T19:38:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T19:38:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T19:38:52Z" name: csr-s4gzd resourceVersion: "7555" uid: 86bd160a-fd0d-4f2a-a462-41819a4435f5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4ecc8b202b4ea714493804a7a4d85225a6ae7a0d48696b5e509101c2a7a09ccb groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-207.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T19:38:39Z" lastUpdateTime: "2026-09-18T19:38:39Z" message: Auto-approved CSR "csr-s4gzd" reason: AutoApproved status: "True" type: Approved