--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T18:58:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T18:58:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T18:58:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T18:58:49Z" name: csr-xtj72 resourceVersion: "6675" uid: 3e64464a-9ac7-43fd-938a-81c4ec09378f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e8059b4963b4ab344400556345e2236443ea2fce2a3f2d9f20ba8b635b5f17f2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T18:58:49Z" lastUpdateTime: "2026-07-10T18:58:49Z" message: Auto-approved CSR "csr-xtj72" reason: AutoApproved status: "True" type: Approved