--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T16:51:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T16:51:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-29T16:51:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-29T16:51:35Z" name: csr-nchw8 resourceVersion: "7053" uid: 341ab1af-3d69-477d-9fd9-e97b83f2661d spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3d5f2316004dc36b5c112918c24290ddee5421cbf733b972fb05b4dbd8051873 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-217.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T16:51:35Z" lastUpdateTime: "2026-07-29T16:51:35Z" message: Auto-approved CSR "csr-nchw8" reason: AutoApproved status: "True" type: Approved