--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T14:40:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T14:40:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-11T14:40:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-11T14:40:47Z" name: csr-rqks5 resourceVersion: "7098" uid: 19e1a04f-9dc6-432e-adc5-a7bd6d977901 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d041248c84ca5270fac851e4e7b709016e82aa0cc4d63a6f8f491d0f18188cf0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-126.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T14:40:47Z" lastUpdateTime: "2026-09-11T14:40:47Z" message: Auto-approved CSR "csr-rqks5" reason: AutoApproved status: "True" type: Approved