--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T09:33:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T09:33:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-10-30T09:33:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-30T09:33:19Z" name: csr-ch8zz resourceVersion: "9349" uid: 2a890fa9-367f-4ac5-bc12-55d141cf6ac3 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5e4bd46cba17749b541e458c9843c219857e33d4cfa33ff34f3f54046ddbc03d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-184.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T09:33:19Z" lastUpdateTime: "2026-10-30T09:33:19Z" message: Auto-approved CSR "csr-ch8zz" reason: AutoApproved status: "True" type: Approved