--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T02:34:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T02:34:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T02:34:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T02:34:46Z" name: csr-nr9cq resourceVersion: "6308" uid: 825c5187-fd0a-40d6-806a-c3492e2173bc spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=41153c80a2b75054f788e4c22e5b6870dc0ead3641dcccb5bc87b902617fbf80 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-136.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T02:34:46Z" lastUpdateTime: "2026-07-09T02:34:46Z" message: Auto-approved CSR "csr-nr9cq" reason: AutoApproved status: "True" type: Approved