--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T15:55:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-30T15:55:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-30T15:55:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T15:55:19Z" name: csr-rpq25 resourceVersion: "6384" uid: 98e5e260-a99d-4c19-a9a0-40db42759041 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d0dca8419ee161296b66cc30cf41f8d9cfb0817290a63b78223b8c6d5cfc4edd groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-217.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-30T15:55:18Z" lastUpdateTime: "2026-07-30T15:55:18Z" message: Auto-approved CSR "csr-rpq25" reason: AutoApproved status: "True" type: Approved