--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T16:20:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-07T16:20:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-07T16:20:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T16:20:34Z" name: csr-nb7vn resourceVersion: "7945" uid: 82132439-70b7-4c46-9334-a11464e554f7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=99b2b0127de0812e26848adcaa0555d793724c0856903605b454d6cddd12e202 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-87.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T16:20:21Z" lastUpdateTime: "2026-09-07T16:20:21Z" message: Auto-approved CSR "csr-nb7vn" reason: AutoApproved status: "True" type: Approved