--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-04T19:16:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-08-04T19:16:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-08-04T19:16:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-04T19:16:29Z" name: csr-t9k8v resourceVersion: "7781" uid: eac52c3e-07a1-4ca7-ba1c-1d673e22c6f5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=384b52f6b7af5d3df2aa038f1b03c9cf4133399e137a524398d4f8ad2450ac30 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-99.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-08-04T19:16:22Z" lastUpdateTime: "2026-08-04T19:16:22Z" message: Auto-approved CSR "csr-t9k8v" reason: AutoApproved status: "True" type: Approved