--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T16:17:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T16:17:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T16:17:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T16:17:50Z" name: csr-zw7pj resourceVersion: "6908" uid: cbcdfc31-f546-49bb-83c9-7d698f0c5043 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=8dd960c4a1ebdfd0c1a6dcdfc8b10ad11ccc05f4d338d43b57c73fe111103cb3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-74.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T16:17:50Z" lastUpdateTime: "2026-09-10T16:17:50Z" message: Auto-approved CSR "csr-zw7pj" reason: AutoApproved status: "True" type: Approved