--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T19:54:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T19:54:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T19:54:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T19:54:43Z" name: csr-r2kq9 resourceVersion: "6881" uid: 0cc172a4-6d0b-4823-a130-cb332191d742 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5c41cd28360609cb6c59afa9f7ea04f5bb4750d31ba0eab47a67fbc1e56eeb31 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-162.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T19:54:43Z" lastUpdateTime: "2026-09-10T19:54:43Z" message: Auto-approved CSR "csr-r2kq9" reason: AutoApproved status: "True" type: Approved