--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T21:12:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T21:12:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-20T21:12:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-20T21:12:56Z" name: csr-pmbxr resourceVersion: "5801" uid: 8a452a7e-0c54-4713-a309-00bf78fa11c9 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=fd2af4faa038a4da587f72effdac182f76aea04dd66703056c59518d031c68d4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-57.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T21:12:56Z" lastUpdateTime: "2026-04-20T21:12:56Z" message: Auto-approved CSR "csr-pmbxr" reason: AutoApproved status: "True" type: Approved