--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T21:37:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T21:37:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-21T21:37:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T21:37:15Z" name: csr-zl6hk resourceVersion: "6585" uid: e1de21a2-85f3-4ce5-be34-91f7dbe5a60d spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=08ce588242e51e7faea257e6a5ce6698d0d39822e88039e26559971d03d64785 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-153.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T21:37:15Z" lastUpdateTime: "2026-07-21T21:37:15Z" message: Auto-approved CSR "csr-zl6hk" reason: AutoApproved status: "True" type: Approved