--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T17:26:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T17:26:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-21T17:26:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T17:26:20Z" name: csr-5r7cr resourceVersion: "6523" uid: 2b9b4a1f-fc3f-487b-8392-60901accd109 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e94a08cb038dfd08c0a42d2d6ae87ea7737592baf2601f8576919b4a06633f45 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-21.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T17:26:20Z" lastUpdateTime: "2026-07-21T17:26:20Z" message: Auto-approved CSR "csr-5r7cr" reason: AutoApproved status: "True" type: Approved