--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T09:54:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T09:54:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T09:54:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T09:54:33Z" name: csr-g9khw resourceVersion: "6518" uid: 900906d0-d82e-4e42-9b7e-7071c1750fa6 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3a15723866ed119365f7dee97e214e375d725df3b1b3b901d32f76fbd6a01cb8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-69.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T09:54:33Z" lastUpdateTime: "2026-07-09T09:54:33Z" message: Auto-approved CSR "csr-g9khw" reason: AutoApproved status: "True" type: Approved