--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T05:33:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T05:33:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-17T05:33:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-17T05:33:29Z" name: csr-nhkzz resourceVersion: "6941" uid: 75021ff4-2a6e-42a5-b98a-46b937375fff spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ef1856485a88118b5977561e9fb9be2f29c274cfa9d1b7cc8c07862c1d5f698a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-187.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T05:33:29Z" lastUpdateTime: "2026-07-17T05:33:29Z" message: Auto-approved CSR "csr-nhkzz" reason: AutoApproved status: "True" type: Approved