--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:08:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-02T19:08:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T19:08:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:08:47Z" name: csr-k8jcs resourceVersion: "7852" uid: 052838e6-e42b-45d0-9f3c-b504f524048e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e1933187e3966f1cd8b1afa1b3b21da805fbf740920972c376aa339f4f0e941a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-147.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T19:08:39Z" lastUpdateTime: "2026-07-02T19:08:39Z" message: Auto-approved CSR "csr-k8jcs" reason: AutoApproved status: "True" type: Approved