--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T17:39:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T17:39:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-11T17:39:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-11T17:39:03Z" name: csr-xxbl9 resourceVersion: "6539" uid: 0e0efcf1-2d75-4410-83bd-5432d7d0369f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=504b6c27db43ad77e8534a9b8461a9b67b67c6e656f5c7a9ed00cf2757b86e9a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-237.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T17:39:03Z" lastUpdateTime: "2026-09-11T17:39:03Z" message: Auto-approved CSR "csr-xxbl9" reason: AutoApproved status: "True" type: Approved