--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T19:20:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T19:20:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-12T19:20:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-12T19:20:28Z" name: csr-d48bf resourceVersion: "7059" uid: 3109e7c5-3588-4b6b-bbdb-a247d45322e1 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f7ee5f8a1db6e5a42d124a90485d4f6d047582d046f5db9761a4bc719ba76dce groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-169.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T19:20:28Z" lastUpdateTime: "2026-07-12T19:20:28Z" message: Auto-approved CSR "csr-d48bf" reason: AutoApproved status: "True" type: Approved