--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T15:09:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T15:09:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-02T15:09:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-02T15:09:51Z" name: csr-vz7hd resourceVersion: "6339" uid: a8b0f1bf-e25b-40b7-b895-ac8efa3e2b64 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3655b4c5bdfdadb75c0b101efd5ed76113f1d1283670ab640a296e4d4f70b081 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-33.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-02T15:09:51Z" lastUpdateTime: "2026-06-02T15:09:51Z" message: Auto-approved CSR "csr-vz7hd" reason: AutoApproved status: "True" type: Approved