--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T07:46:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T07:46:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-28T07:46:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-28T07:46:36Z" name: csr-gbf29 resourceVersion: "6551" uid: 98815007-50aa-4a78-bfd2-2b71a55183c5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d19bdeb7ae6fecfc967d0a8c36ecd72dd0c99695a062b7169fdb0ac4a1bd6034 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-33.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T07:46:36Z" lastUpdateTime: "2026-07-28T07:46:36Z" message: Auto-approved CSR "csr-gbf29" reason: AutoApproved status: "True" type: Approved