--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T14:57:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T14:57:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-07T14:57:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-07T14:57:22Z" name: csr-tf6nz resourceVersion: "6571" uid: 9483fb22-9d88-47ea-8bbc-9b7f71c719a5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=efca0cee1945f83e3ec0f33160f88c23177d98a168ca6f69339fe46b43594907 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-241.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T14:57:22Z" lastUpdateTime: "2026-07-07T14:57:22Z" message: Auto-approved CSR "csr-tf6nz" reason: AutoApproved status: "True" type: Approved