--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T18:20:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T18:20:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-01T18:20:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-01T18:20:13Z" name: csr-qh9g9 resourceVersion: "7209" uid: 10690bf3-22f2-4d19-b5a9-8ebe2a67e61b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b22fe595ec812143052128a3d50d66b4ff2fe57d47bcf36cf559ca9124ba2616 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-33.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T18:20:13Z" lastUpdateTime: "2026-07-01T18:20:13Z" message: Auto-approved CSR "csr-qh9g9" reason: AutoApproved status: "True" type: Approved