--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T19:25:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T19:25:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-20T19:25:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-20T19:25:50Z" name: csr-q22b7 resourceVersion: "6169" uid: 5efc6dff-0446-4660-956d-f1322e991ea4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=83b0b78c51fcf77a467fb19bc42ae4261ea06cc9df510e2a7fb02ed4ef6e08e6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-162.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T19:25:50Z" lastUpdateTime: "2026-04-20T19:25:50Z" message: Auto-approved CSR "csr-q22b7" reason: AutoApproved status: "True" type: Approved