--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T19:56:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T19:56:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-20T19:56:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-20T19:56:59Z" name: csr-ns9gx resourceVersion: "7409" uid: 059d59dd-c235-4daa-9526-cf2d08e030af spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=cd5b56b1e1abc944c0701a0db9bc0bd3c11478aa25780c139d3be571f52e74dd groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-157.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T19:56:59Z" lastUpdateTime: "2026-07-20T19:56:59Z" message: Auto-approved CSR "csr-ns9gx" reason: AutoApproved status: "True" type: Approved