--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:54:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T18:54:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T18:54:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:54:33Z" name: csr-wr4jg resourceVersion: "8050" uid: 5b83e472-08bc-416a-9d06-20690e39deb7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4cea2865365e4a6e6f4417eb2b3b02d17af01b14c5dd0882cb0522604599a502 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-3.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:54:12Z" lastUpdateTime: "2026-07-09T18:54:12Z" message: Auto-approved CSR "csr-wr4jg" reason: AutoApproved status: "True" type: Approved