--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T18:10:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T18:10:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-14T18:10:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-14T18:10:28Z" name: csr-x4zl2 resourceVersion: "6191" uid: 52d75cf8-2e15-498c-8540-35d97754b64b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9afccb6810ee3bb7d651b2e2d851da3b48370ae9a316652d7563662d01dadc3b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-146.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T18:10:28Z" lastUpdateTime: "2026-07-14T18:10:28Z" message: Auto-approved CSR "csr-x4zl2" reason: AutoApproved status: "True" type: Approved