--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T20:22:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T20:22:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-14T20:22:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-14T20:22:40Z" name: csr-tgmxf resourceVersion: "6747" uid: 921e76d0-a292-45cf-8c3f-f4bc488320ee spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=31938175a75fa395663765d06c5d014a05a2d4261e9d79a1feaeb44858b61062 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-189.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T20:22:40Z" lastUpdateTime: "2026-07-14T20:22:40Z" message: Auto-approved CSR "csr-tgmxf" reason: AutoApproved status: "True" type: Approved