--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T16:37:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T16:37:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-25T16:37:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-25T16:37:52Z" name: csr-g29bj resourceVersion: "6789" uid: c9059a72-fcde-4958-adfe-b469ce8a95af spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=95aca263ef6c120dd9b8a8682444e307b52fc09153967b9fb2ae84440a06fde7 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-73.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-25T16:37:52Z" lastUpdateTime: "2026-05-25T16:37:52Z" message: Auto-approved CSR "csr-g29bj" reason: AutoApproved status: "True" type: Approved