--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:59:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:59:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T18:59:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T18:59:47Z" name: csr-whl2h resourceVersion: "6795" uid: 8ccda77e-1e96-482d-9d72-df35940fa95a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6c98b3d253f591f9660f99054698579157695a1925470c3f60ab695a0a261b67 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-157.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:59:47Z" lastUpdateTime: "2026-07-09T18:59:47Z" message: Auto-approved CSR "csr-whl2h" reason: AutoApproved status: "True" type: Approved