--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T12:54:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-28T12:54:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-28T12:54:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T12:54:37Z" name: csr-5vft7 resourceVersion: "8035" uid: a709170f-a359-498a-9bff-a4378ff745c4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=afd345fe372555c473c716393294f62a1e27a7155f2e1f77333d038c243d7159 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-149.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T12:54:17Z" lastUpdateTime: "2026-07-28T12:54:17Z" message: Auto-approved CSR "csr-5vft7" reason: AutoApproved status: "True" type: Approved