--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T16:37:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T16:37:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-15T16:37:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-15T16:37:20Z" name: csr-k9nhh resourceVersion: "7259" uid: 6afc509e-4f10-4a4b-bcc6-de5400e59c88 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3badd377e8e5968537de8c875ccfda1f38509b9fa1796dd31bf1913bd2b00f3a groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkRqQ0J0QUlCQURCU01Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UVXdNd1lEVlFRRApFeXh6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhNek10TWpFMExtVmpNaTVwYm5SbGNtNWhiREJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQktYQzlZV1BYZTdJMkJLSGY3R1ZPd0tGYWhWb3hya1gKcVA5MXVSMjdERzI3R2VjMllXQ2lBY1JRZGUzRDlwS0RzNm5Na2ZFSksxdGNzMmNLclh1VkNPR2dBREFLQmdncQpoa2pPUFFRREFnTkpBREJHQWlFQStyM2VXSTBreVBMS0FoSzRqaEJYZXJyanNBdFMwcFhKcG5sd3VSbWhkckVDCklRRHArYzdiVmIwNm5JTzltWGsvRTdBUjlTYW5MWDRCZWhyWDl4WjBEaFVncFE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-214.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T16:37:20Z" lastUpdateTime: "2026-07-15T16:37:20Z" message: Auto-approved CSR "csr-k9nhh" reason: AutoApproved status: "True" type: Approved