--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T09:57:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T09:57:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-20T09:57:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-20T09:57:18Z" name: csr-98g29 resourceVersion: "6292" uid: 63c02e78-34c4-4f9b-8a71-1fa7c71942bc spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=af7a9e7648900759bf344b2e2a9cdc7a1c873d1b33a66c842cc06061ef20f7b3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-245.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T09:57:18Z" lastUpdateTime: "2026-07-20T09:57:18Z" message: Auto-approved CSR "csr-98g29" reason: AutoApproved status: "True" type: Approved