--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-19T08:20:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-19T08:20:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-19T08:20:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-19T08:20:59Z" name: csr-gj4l2 resourceVersion: "6737" uid: 5a1a0fef-a5e1-4b9c-9ac9-e8536e57a1fc spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6c8552be0c9205e5e1c8cb53116bfb98d8b815911a0c68f4a3ec2ea98448f755 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-99.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-19T08:20:59Z" lastUpdateTime: "2026-09-19T08:20:59Z" message: Auto-approved CSR "csr-gj4l2" reason: AutoApproved status: "True" type: Approved