--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T16:23:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-08T16:23:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-08T16:23:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T16:23:41Z" name: csr-5ppjb resourceVersion: "8019" uid: 1dd7a6c3-a058-44aa-9655-358f1e19f5dc spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=46c73a1d4fe51e460192e3f0f80340c69d4583e00f3fa06b8d878ab12dc74bb7 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-131.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T16:23:20Z" lastUpdateTime: "2026-09-08T16:23:20Z" message: Auto-approved CSR "csr-5ppjb" reason: AutoApproved status: "True" type: Approved