--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T20:57:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T20:57:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-07T20:57:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-07T20:57:41Z" name: csr-7kqsg resourceVersion: "6759" uid: 2db21c1a-00c6-4b15-a24f-6048e92de33a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4f52458616e710c6ce33f19933088d586afae7d8ea74a00161e6ca13bcf69dfe groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-24.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T20:57:41Z" lastUpdateTime: "2026-09-07T20:57:41Z" message: Auto-approved CSR "csr-7kqsg" reason: AutoApproved status: "True" type: Approved