--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T20:35:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T20:35:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T20:35:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T20:35:15Z" name: csr-dzctt resourceVersion: "7021" uid: 1d0d6317-022b-42df-be0b-a0af00bf7952 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=21519e6ca91c6ef127207f69a695b35d621304092442f5344c0587dbc4143735 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-64.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T20:35:15Z" lastUpdateTime: "2026-07-10T20:35:15Z" message: Auto-approved CSR "csr-dzctt" reason: AutoApproved status: "True" type: Approved