--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T16:36:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T16:36:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T16:36:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T16:36:48Z" name: csr-kcxxm resourceVersion: "6569" uid: cdcdc175-d55a-4fab-92f0-f4904aecb985 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=950a974457827d326f7bb8db945d037ca8fb40ef42826e66c4ee5c3a49bd97c5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-50.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T16:36:48Z" lastUpdateTime: "2026-07-10T16:36:48Z" message: Auto-approved CSR "csr-kcxxm" reason: AutoApproved status: "True" type: Approved