--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T23:06:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T23:06:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T23:06:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T23:06:39Z" name: csr-nmczx resourceVersion: "6503" uid: 22e3b06f-cc7b-43ed-8f39-8408e7f52fdb spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2091d12e4e0ed8d3104bf87fcd1bf3ba9c1a3374d32fee67c3d0b0b2bf4c9676 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-222.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T23:06:39Z" lastUpdateTime: "2026-09-17T23:06:39Z" message: Auto-approved CSR "csr-nmczx" reason: AutoApproved status: "True" type: Approved