--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T23:11:06Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T23:11:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T23:11:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T23:11:06Z" name: csr-rz5gt resourceVersion: "5848" uid: 05ac3414-2243-49ff-b4cd-f67999a2315f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f16bc459174461eb8dee3c3139ed808da5326d9be62b6f31a843e022a022a0d1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-77.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T23:11:06Z" lastUpdateTime: "2026-09-17T23:11:06Z" message: Auto-approved CSR "csr-rz5gt" reason: AutoApproved status: "True" type: Approved