--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T19:35:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T19:35:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-01T19:35:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-01T19:35:27Z" name: csr-tzlj9 resourceVersion: "6897" uid: 6638c80d-4f96-466e-90d4-6d09ac296269 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a4fa4f68ff494df16bc21c805700ea1e9e10da2a6cc11aee26ecb9d6cd069d12 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-167.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T19:35:27Z" lastUpdateTime: "2026-07-01T19:35:27Z" message: Auto-approved CSR "csr-tzlj9" reason: AutoApproved status: "True" type: Approved