--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T15:57:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-08T15:57:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-08T15:57:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T15:58:02Z" name: csr-5brp8 resourceVersion: "7907" uid: 5922def6-be77-4a5c-97d6-4cdb2013547b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=abb9b21dd217c113f897b250bcc48e34cd256293a2e00a06c16f8554506fb902 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-83.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T15:57:49Z" lastUpdateTime: "2026-07-08T15:57:49Z" message: Auto-approved CSR "csr-5brp8" reason: AutoApproved status: "True" type: Approved