--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T08:07:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T08:07:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-12T08:07:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-12T08:07:23Z" name: csr-9lrqx resourceVersion: "7277" uid: 87d6d158-cea7-4b96-86b4-503218ad398f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=fd0ce8f44645a919c20ff9918868e630dd0dd760bc9d7cbdea10a52c4d6625e9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-48.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T08:07:23Z" lastUpdateTime: "2026-07-12T08:07:23Z" message: Auto-approved CSR "csr-9lrqx" reason: AutoApproved status: "True" type: Approved