--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T16:16:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T16:16:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T16:16:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T16:16:10Z" name: csr-z2p2g resourceVersion: "6723" uid: 54d8d1af-048e-4684-b8a2-b2c80419e5f3 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=8b20232d11252cd6dbc47fd64804632626d584c1f945104b29d52fbbf40044bd groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-224.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T16:16:10Z" lastUpdateTime: "2026-09-18T16:16:10Z" message: Auto-approved CSR "csr-z2p2g" reason: AutoApproved status: "True" type: Approved