--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T16:24:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-06T16:24:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-06T16:24:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T16:24:46Z" name: csr-x8dld resourceVersion: "7842" uid: a001cb64-7eb3-4ab3-9e6c-589604686705 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5585f9009f8484375be6d0645aad043bd3ccd11db2ce013cbd3849a7f326c35e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-22.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T16:24:40Z" lastUpdateTime: "2026-07-06T16:24:40Z" message: Auto-approved CSR "csr-x8dld" reason: AutoApproved status: "True" type: Approved