--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:58:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:58:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T18:58:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T18:58:48Z" name: csr-s9hk8 resourceVersion: "6531" uid: 3a07e6ca-f422-46f7-8719-7b1ff9afb3b4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c6d5a3fc80769e37307524175b34d0c47e8f2fd7f441d2f09a6abdc8f53a1502 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-17.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:58:48Z" lastUpdateTime: "2026-07-09T18:58:48Z" message: Auto-approved CSR "csr-s9hk8" reason: AutoApproved status: "True" type: Approved