--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T18:29:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T18:29:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T18:29:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T18:29:55Z" name: csr-xmrlp resourceVersion: "8028" uid: 01df7085-d3ac-497c-ac1e-f0bef170e595 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=dde1ac125914a6932e47330913086f2a1767873293da9a6315fc4090cf2befa5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-196.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T18:29:34Z" lastUpdateTime: "2026-07-27T18:29:34Z" message: Auto-approved CSR "csr-xmrlp" reason: AutoApproved status: "True" type: Approved