--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T16:51:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T16:51:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T16:51:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T16:53:42Z" name: csr-tcsxn resourceVersion: "7865" uid: 1fad86da-dcad-44d8-84e7-1b914257cc3b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=af10ac753ef032ecdfe363987e74102a667f30fc7aafa7f6577e470992ee392e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-188.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T16:51:47Z" lastUpdateTime: "2026-09-18T16:51:47Z" message: Auto-approved CSR "csr-tcsxn" reason: AutoApproved status: "True" type: Approved