--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T14:11:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-07T14:11:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-07T14:11:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T14:11:46Z" name: csr-t5gx5 resourceVersion: "7967" uid: ff186c70-cbc4-4990-bd28-5bf7738fa7d4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=37d4a2b2f057c0b23e2dcc5b32c92f3c51ba5d6a0e94185734f1aff3787622b3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-215.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T14:11:26Z" lastUpdateTime: "2026-09-07T14:11:26Z" message: Auto-approved CSR "csr-t5gx5" reason: AutoApproved status: "True" type: Approved