--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T22:40:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T22:40:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-30T22:40:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-30T22:40:47Z" name: csr-kq67r resourceVersion: "7352" uid: 3446fa6f-6a76-4010-9378-0a2bc08b1359 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2f4d28b868d1f2bd339085e355d9c35bd20b743c52f7641bc797b910291fa374 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-225.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-30T22:40:47Z" lastUpdateTime: "2026-07-30T22:40:47Z" message: Auto-approved CSR "csr-kq67r" reason: AutoApproved status: "True" type: Approved