--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T10:20:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T10:20:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-29T10:20:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-29T10:20:33Z" name: csr-978c8 resourceVersion: "6195" uid: d01727c9-5052-4e4d-857a-993283124fc7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=75c95b02b279cb039f6afeae46248172bfdcfdb37ad385b7075a08d8ab6a2cfc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-139.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T10:20:33Z" lastUpdateTime: "2026-07-29T10:20:33Z" message: Auto-approved CSR "csr-978c8" reason: AutoApproved status: "True" type: Approved