--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T13:39:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-20T13:39:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-20T13:39:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T13:39:27Z" name: csr-sgqfv resourceVersion: "7864" uid: 42f3c752-73e9-4ffb-bb7e-15a95e9eef07 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=348f6f1aeee66a320386413597990ac0946af343f7429746d5128bb708bcc3c7 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-52.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T13:39:12Z" lastUpdateTime: "2026-07-20T13:39:12Z" message: Auto-approved CSR "csr-sgqfv" reason: AutoApproved status: "True" type: Approved