--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:05:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:05:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-02T19:05:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T19:05:46Z" name: csr-pfgcl resourceVersion: "6989" uid: 1df177ff-456c-4d4e-a8fc-b9d643791393 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a8a24bde37ad8884adc147a5a5fbf101d270a9b2f13ec94f204e17329b5911c7 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-120.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T19:05:46Z" lastUpdateTime: "2026-07-02T19:05:46Z" message: Auto-approved CSR "csr-pfgcl" reason: AutoApproved status: "True" type: Approved