--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T19:15:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-29T19:15:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-29T19:15:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T19:15:51Z" name: csr-28cfq resourceVersion: "7955" uid: 058d5028-2145-4c37-9397-9fdc14698250 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=fdf7b67df418d3c3c4ee68e150f04c91d33a266c7750f82e41744ecd54e8d4b8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-131.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T19:15:34Z" lastUpdateTime: "2026-07-29T19:15:34Z" message: Auto-approved CSR "csr-28cfq" reason: AutoApproved status: "True" type: Approved