--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T11:15:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-07T11:15:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-07T11:15:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T11:15:45Z" name: csr-lng5g resourceVersion: "6440" uid: c3ef1050-f171-4ac2-a185-aa41447bdd78 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=cb75af06f514e35622dfb752c5fc9e3e974de4dbde87588e029a2a57c11a85a3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-180.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T11:15:44Z" lastUpdateTime: "2026-07-07T11:15:44Z" message: Auto-approved CSR "csr-lng5g" reason: AutoApproved status: "True" type: Approved