--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T21:08:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T21:08:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-09T21:08:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-09T21:08:40Z" name: csr-clxt2 resourceVersion: "7257" uid: e1a221da-9308-4f96-852d-62595c85dd52 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=15962a6104a678310c003ff996546dfa330fedf7b035a7e119bf0ca1c0332f54 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-56.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T21:08:40Z" lastUpdateTime: "2026-09-09T21:08:40Z" message: Auto-approved CSR "csr-clxt2" reason: AutoApproved status: "True" type: Approved