--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T13:38:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T13:38:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-24T13:38:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-24T13:38:51Z" name: csr-k8nxs resourceVersion: "6837" uid: 1e382d5d-e4cd-42e2-90d9-909f15419d1e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3f7b508b758104acef7d7794edecdbd2df6a2315e8a9b9780ead1c3bb36fd6d6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-248.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T13:38:51Z" lastUpdateTime: "2026-07-24T13:38:51Z" message: Auto-approved CSR "csr-k8nxs" reason: AutoApproved status: "True" type: Approved