--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T09:42:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-04T09:42:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-04T09:42:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T09:42:56Z" name: csr-qx8tc resourceVersion: "6772" uid: 557c2210-4ae2-4d0a-a9d4-83882e435001 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a9772d11ef6a0dfe9366009295e1b76c7b82ac84e9d29bf37f09cfcdc43a0c14 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-9.us-west-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T09:42:45Z" lastUpdateTime: "2026-11-04T09:42:45Z" message: Auto-approved CSR "csr-qx8tc" reason: AutoApproved status: "True" type: Approved