--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T22:05:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T22:05:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-02T22:05:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-02T22:05:25Z" name: csr-z7fgp resourceVersion: "6283" uid: b82a09a7-0e29-4df6-93ff-0ff7b7b59a51 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=25ff4517e4cd5171f6324a383dda221e96278f39dbc3df4b9bcad5c8d44fb28f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-221.us-west-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T22:05:25Z" lastUpdateTime: "2026-11-02T22:05:25Z" message: Auto-approved CSR "csr-z7fgp" reason: AutoApproved status: "True" type: Approved