--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T16:01:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T16:01:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T16:01:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T16:01:10Z" name: csr-f98g7 resourceVersion: "6675" uid: 84aa5ff3-f496-48d5-88fe-c90d32abee9a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4b3a8151c18e2c58c298923d14addac6dc98a70a792a5687d9ff6ad58828c24a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-251.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T16:01:10Z" lastUpdateTime: "2026-07-27T16:01:10Z" message: Auto-approved CSR "csr-f98g7" reason: AutoApproved status: "True" type: Approved