--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T18:45:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T18:45:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-24T18:45:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-24T18:45:20Z" name: csr-2nttl resourceVersion: "9809" uid: 958d65b9-a632-4d7b-8846-6673ab1174a5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d053f5db9a89bd20c79939460a0e9052a9d9c46bf26429e9264d97c55c6e9580 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-213.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T18:45:20Z" lastUpdateTime: "2026-07-24T18:45:20Z" message: Auto-approved CSR "csr-2nttl" reason: AutoApproved status: "True" type: Approved