--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-05T11:40:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-05T11:40:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-05T11:40:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-05T11:40:48Z" name: csr-sbz4x resourceVersion: "8065" uid: 62a1026e-0604-45ae-9acb-9cfe5a9d8e65 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b999fe9959cc7b7483989aaeb6ac3aadc3e7dd850aba1d5174637803c972dedc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-222.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-05T11:40:16Z" lastUpdateTime: "2026-06-05T11:40:16Z" message: Auto-approved CSR "csr-sbz4x" reason: AutoApproved status: "True" type: Approved