--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T20:37:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-10-30T20:37:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-30T20:37:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T20:37:57Z" name: csr-lvl4z resourceVersion: "8248" uid: e5dd2f37-650a-46d0-bd6f-bb5af7f515f0 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f5476a15406bd3186bbc97777396b6f51e2086a79f77ddfcb46854b2978957a4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-52.us-east-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T20:37:56Z" lastUpdateTime: "2026-10-30T20:37:56Z" message: Auto-approved CSR "csr-lvl4z" reason: AutoApproved status: "True" type: Approved