--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T15:13:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-08T15:13:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-08T15:13:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T15:13:47Z" name: csr-wkt4m resourceVersion: "8056" uid: 4a105175-f4a0-4766-8bb2-c1729ae0a7f2 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4ccdbd52c2adfbad35fbc0f7a3e5e2050d0bc469684193cac18368c8b0d63af5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-54.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T15:13:26Z" lastUpdateTime: "2026-09-08T15:13:26Z" message: Auto-approved CSR "csr-wkt4m" reason: AutoApproved status: "True" type: Approved