--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T16:53:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T16:53:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T16:53:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T16:53:51Z" name: csr-nqs9t resourceVersion: "8319" uid: 0aa84b66-8d38-4cc0-ad0a-0d3998a5f288 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9f509b88a6e7be9bc246531e6bdd87662d737685d542141eb13b6d9ca7dddfc5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-7.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T16:53:51Z" lastUpdateTime: "2026-09-18T16:53:51Z" message: Auto-approved CSR "csr-nqs9t" reason: AutoApproved status: "True" type: Approved