--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T22:32:37Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-01T22:32:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-01T22:32:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T22:32:42Z" name: csr-g4htx resourceVersion: "8057" uid: 3952c3be-ab90-4c3b-9359-a7c2f058c766 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c46638b575d191317281c70659b4a46ad53ea0a28a3a5d82bfae2dd2785991f2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-190.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T22:32:37Z" lastUpdateTime: "2026-07-01T22:32:37Z" message: Auto-approved CSR "csr-g4htx" reason: AutoApproved status: "True" type: Approved