--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T14:09:06Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T14:09:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T14:09:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T14:09:16Z" name: csr-qb7zs resourceVersion: "7972" uid: a8979a88-118b-4622-b5fb-f02b13dd32f6 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=93de91be602daebda5b5e068c1927238557d6e60ba7d7ba2f8916bab4a0a58c3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-2.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T14:09:06Z" lastUpdateTime: "2026-07-10T14:09:06Z" message: Auto-approved CSR "csr-qb7zs" reason: AutoApproved status: "True" type: Approved