--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T16:28:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T16:28:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-06T16:28:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-06T16:28:36Z" name: csr-z7zlc resourceVersion: "6232" uid: 07c02a1b-64a1-4836-9a88-afddd7962ee1 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=44221bd0221a62533db3e0b686b62b470795c0a3f7c5e15d0db2c359b9d32445 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-170.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T16:28:36Z" lastUpdateTime: "2026-07-06T16:28:36Z" message: Auto-approved CSR "csr-z7zlc" reason: AutoApproved status: "True" type: Approved