--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T16:22:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T16:22:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-08T16:22:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-08T16:22:59Z" name: csr-xpfpr resourceVersion: "6758" uid: fe0d4475-c613-43d0-9eab-679246596b35 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c30ea49d40f4bde4dbef1780ac1cc544e3775068e8962b9e276d6256541ae179 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-120.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T16:22:59Z" lastUpdateTime: "2026-09-08T16:22:59Z" message: Auto-approved CSR "csr-xpfpr" reason: AutoApproved status: "True" type: Approved