--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T18:17:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T18:17:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-21T18:17:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T18:17:56Z" name: csr-4ch4j resourceVersion: "7224" uid: a9fe3586-e1f3-4f63-bfa7-a5c11163a2d4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=adb52b17f40ee3eeea63d9d80843b27376fb6c19ab94358e4dab512ecca73b56 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-179.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T18:17:56Z" lastUpdateTime: "2026-07-21T18:17:56Z" message: Auto-approved CSR "csr-4ch4j" reason: AutoApproved status: "True" type: Approved