--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:36:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T17:36:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T17:36:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:37:10Z" name: csr-pc6dh resourceVersion: "7941" uid: e2fd4809-7580-4686-b1ab-9e0dae232e01 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6a34271268594ff774230e42254bbb368c2d0e38335630acc1b8415774a4718c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-180.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T17:36:47Z" lastUpdateTime: "2026-09-10T17:36:47Z" message: Auto-approved CSR "csr-pc6dh" reason: AutoApproved status: "True" type: Approved