--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T13:29:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T13:29:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T13:31:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T13:31:44Z" name: csr-kjz6n resourceVersion: "6639" uid: 4e7c755c-fe1f-4af5-8f0e-b6ea098890dc spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2da004e81bc5baeaf992f07b747e26f676ac4fd3ba4503203d72a0a4ee2e91f9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-8.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T13:31:44Z" lastUpdateTime: "2026-09-10T13:31:44Z" message: Auto-approved CSR "csr-kjz6n" reason: AutoApproved status: "True" type: Approved