--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T19:16:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-23T19:16:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-23T19:16:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T19:17:08Z" name: csr-lh67q resourceVersion: "8043" uid: 9c193d38-caee-45f4-b29e-031ec3bb5a2e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e8f695ccaedf4921a98ff9cdf577663788b3cfc7262d1b94ff0c95508b0f32ec groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-14.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T19:16:52Z" lastUpdateTime: "2026-07-23T19:16:52Z" message: Auto-approved CSR "csr-lh67q" reason: AutoApproved status: "True" type: Approved