--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T09:54:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T09:54:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-31T09:54:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-31T09:54:57Z" name: csr-rwn8b resourceVersion: "6064" uid: b2b2b5f2-9b91-401a-9451-4cc44f2922c2 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=036985877b790b374e9955b0395bdaa918d1def83e2396643b5e49985ff686c6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-209.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T09:54:57Z" lastUpdateTime: "2026-07-31T09:54:57Z" message: Auto-approved CSR "csr-rwn8b" reason: AutoApproved status: "True" type: Approved