--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T17:26:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T17:26:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T17:26:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T17:27:15Z" name: csr-2q7bl resourceVersion: "7863" uid: 841dab6a-a39a-4b81-a6a9-d23fb755837b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=def6b09ed8c0ecc0f87b08ed5a79cb2eb812911d85d5e203bd69d2e68dda33d6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-150.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T17:26:54Z" lastUpdateTime: "2026-09-17T17:26:54Z" message: Auto-approved CSR "csr-2q7bl" reason: AutoApproved status: "True" type: Approved