--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T13:04:37Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-10T13:04:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-10T13:04:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T13:04:38Z" name: csr-5dqql resourceVersion: "7646" uid: ed1d3117-317e-480f-8cd7-b3e7d896b731 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=875fb315ab8e2468752d7c96132e2a3d24c726f7a01641968cc5ab5a9947d9f2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-131.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-10T13:04:37Z" lastUpdateTime: "2026-06-10T13:04:37Z" message: Auto-approved CSR "csr-5dqql" reason: AutoApproved status: "True" type: Approved