--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T14:39:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T14:39:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-01T14:39:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-01T14:39:40Z" name: csr-zpm8q resourceVersion: "6665" uid: 39bf4d2c-a1ff-4cd3-95ed-bd30f7218b00 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e73dad45b5bb6fe7ae8b0488746cc4adb2f00654971f31c472ac9342863b8b41 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-214.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T14:39:40Z" lastUpdateTime: "2026-07-01T14:39:40Z" message: Auto-approved CSR "csr-zpm8q" reason: AutoApproved status: "True" type: Approved