--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T14:25:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-07T14:25:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-07T14:25:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T14:25:27Z" name: csr-cplzc resourceVersion: "7928" uid: 10cf7f06-cd1b-4403-ad8d-0aaed2b000ea spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=442af303423c65770c9378bb6532d249cac776a2b02e961e9296847ab60bfc2d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-34.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T14:25:04Z" lastUpdateTime: "2026-07-07T14:25:04Z" message: Auto-approved CSR "csr-cplzc" reason: AutoApproved status: "True" type: Approved