--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T17:14:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T17:14:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-16T17:14:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-16T17:14:54Z" name: csr-q2khr resourceVersion: "6628" uid: 87488928-dabb-41d5-bcd4-6e55c0c88dc6 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=cd7d63de04258fae048267804af6ef3d54c9aa946021a6062f4b0e2c60fa88b7 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-26.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T17:14:54Z" lastUpdateTime: "2026-07-16T17:14:54Z" message: Auto-approved CSR "csr-q2khr" reason: AutoApproved status: "True" type: Approved