--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T14:45:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T14:45:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T14:45:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T14:46:08Z" name: csr-zjg79 resourceVersion: "7755" uid: c5a1fad6-cc48-43b0-8c73-b0af52d7ed5c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=003763dbfa06381536345840688de359ba3e77ec253d93933a86048716866442 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-1.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T14:45:48Z" lastUpdateTime: "2026-07-10T14:45:48Z" message: Auto-approved CSR "csr-zjg79" reason: AutoApproved status: "True" type: Approved