--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T02:34:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T02:34:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T02:34:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T02:34:30Z" name: csr-b8f4f resourceVersion: "7858" uid: 0026bb72-81c1-42ef-a13c-fe542cc81f78 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=89ef3c339d70a63b7186d33064914e577c3a6f099a848f412893ca5f9a5f60d0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-27.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T02:34:20Z" lastUpdateTime: "2026-09-10T02:34:20Z" message: Auto-approved CSR "csr-b8f4f" reason: AutoApproved status: "True" type: Approved