--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T02:55:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-07T02:55:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-07T02:55:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T02:55:13Z" name: csr-2b6bt resourceVersion: "7720" uid: c0e45e07-cc48-43fc-91f3-da2ed094be65 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=619b2ec20ba885e028c4422b4a48b5695d02d99eaf98ebe917900e24863986ec groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T02:55:09Z" lastUpdateTime: "2026-09-07T02:55:09Z" message: Auto-approved CSR "csr-2b6bt" reason: AutoApproved status: "True" type: Approved