--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:24:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:24:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T17:24:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T17:24:14Z" name: csr-7g9mc resourceVersion: "6372" uid: 9afa1b86-d572-4afb-b392-4fa6107c9aba spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ec1717296fcb5df9c8f21f3c9e2670f862a3168ee2a77242b50d931f82a04816 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-90.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T17:24:14Z" lastUpdateTime: "2026-09-10T17:24:14Z" message: Auto-approved CSR "csr-7g9mc" reason: AutoApproved status: "True" type: Approved