--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T07:15:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-29T07:15:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-29T07:15:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T07:16:02Z" name: csr-dw2n2 resourceVersion: "7981" uid: ce82969a-6290-440d-84dd-562f184f5b07 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6afe58c743bb4890550d9acc1a99e462ca683ebfd87aa56d17ffb18d58007f77 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-226.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T07:15:45Z" lastUpdateTime: "2026-07-29T07:15:45Z" message: Auto-approved CSR "csr-dw2n2" reason: AutoApproved status: "True" type: Approved