--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-20T19:44:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-20T19:44:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-20T19:44:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-20T19:44:44Z" name: csr-bxkz4 resourceVersion: "6875" uid: 9f433f7c-1d7a-45d1-b43f-86435a755a86 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=428b63f45e138348b316cc5d6e9aa0f511fdcfa8229d1b53d916811693891748 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-167.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-20T19:44:44Z" lastUpdateTime: "2026-05-20T19:44:44Z" message: Auto-approved CSR "csr-bxkz4" reason: AutoApproved status: "True" type: Approved