--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T16:20:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T16:20:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T16:20:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T16:20:18Z" name: csr-h8wjg resourceVersion: "7747" uid: ba784f50-025f-4184-aee3-c3f4f470b08b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=868cc7d002acec22a91cd610b27335477e830c42882f6d71f8197e0d26368379 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-68.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T16:20:04Z" lastUpdateTime: "2026-07-09T16:20:04Z" message: Auto-approved CSR "csr-h8wjg" reason: AutoApproved status: "True" type: Approved