--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T14:51:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T14:51:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T14:51:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T14:51:42Z" name: csr-tx2hq resourceVersion: "7705" uid: 2ca47ec1-5e35-4787-9859-572b60125556 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=33d1c5cb699c246223ef83c278a97f41d39614705bad2cb912d398aa919c605d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-100.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T14:51:42Z" lastUpdateTime: "2026-09-18T14:51:42Z" message: Auto-approved CSR "csr-tx2hq" reason: AutoApproved status: "True" type: Approved