--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T21:26:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T21:26:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-15T21:26:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-15T21:26:11Z" name: csr-q9pnc resourceVersion: "6733" uid: 27a67c1f-d384-403f-bf78-47eea61091a2 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9130dd3c4fad0db74cc131a5639546c7e3f24a3035d73278218b53a955f7f437 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-42.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T21:26:11Z" lastUpdateTime: "2026-09-15T21:26:11Z" message: Auto-approved CSR "csr-q9pnc" reason: AutoApproved status: "True" type: Approved