--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T14:20:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-31T14:20:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-31T14:20:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T14:20:49Z" name: csr-9ld68 resourceVersion: "7892" uid: 0995eed1-e9e8-4f31-b3b6-13ea7aa05b61 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a8375b5f189a6fbb4ca62c01b0f323130b47d45a4c91566f04dace928fe10cac groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-138.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T14:20:32Z" lastUpdateTime: "2026-07-31T14:20:32Z" message: Auto-approved CSR "csr-9ld68" reason: AutoApproved status: "True" type: Approved