--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:34:08Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:34:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T18:34:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T18:34:08Z" name: csr-nc2qs resourceVersion: "6259" uid: 33733f33-45d9-4e31-8a8f-3913244f0fce spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b209cdec1b4ccfad7318fa7d62e8ab5542c7f14bb6683417b298f80309da5155 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-1.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:34:08Z" lastUpdateTime: "2026-07-09T18:34:08Z" message: Auto-approved CSR "csr-nc2qs" reason: AutoApproved status: "True" type: Approved