--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T17:26:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T17:26:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-21T17:26:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T17:26:36Z" name: csr-zrxq9 resourceVersion: "6641" uid: 6b6e6b6b-0436-4d22-9326-6240b484b09f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3f9f1c7f28e0ac6a696f778b5d077a3fa075bce38cd21abf6fa3c8cd1348e3ae groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-47.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T17:26:36Z" lastUpdateTime: "2026-07-21T17:26:36Z" message: Auto-approved CSR "csr-zrxq9" reason: AutoApproved status: "True" type: Approved