--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T09:00:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T09:00:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-24T09:00:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-24T09:00:53Z" name: csr-25gh2 resourceVersion: "6940" uid: e07a7c61-c816-4573-9637-a5c1768d91df spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=104dd30075825b73c8a824480c846dbb7da3eb59b55625bf0eb22e8df94fabf5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-169.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T09:00:53Z" lastUpdateTime: "2026-07-24T09:00:53Z" message: Auto-approved CSR "csr-25gh2" reason: AutoApproved status: "True" type: Approved