--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T11:24:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T11:24:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-22T11:24:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-22T11:24:19Z" name: csr-2tzgw resourceVersion: "6787" uid: deb06ac9-afd3-498b-a8cc-7a53e13d5cfc spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=8b41b44a8ef057b3f905d92ac79f1b5b42cba377385dd138715101257d94321a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-12.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T11:24:19Z" lastUpdateTime: "2026-07-22T11:24:19Z" message: Auto-approved CSR "csr-2tzgw" reason: AutoApproved status: "True" type: Approved