--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T11:43:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T11:43:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-09T11:43:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-09T11:43:34Z" name: csr-zt889 resourceVersion: "7141" uid: 378b266f-261c-4987-a0a5-6b6c88ce9010 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4fd18f9e424a7675b668464effa58207d25986a9ec45069ede2372686964870f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-214.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T11:43:34Z" lastUpdateTime: "2026-06-09T11:43:34Z" message: Auto-approved CSR "csr-zt889" reason: AutoApproved status: "True" type: Approved