--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-05T03:10:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-05T03:10:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-05T03:10:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-05T03:10:09Z" name: csr-98zhf resourceVersion: "6947" uid: ef3d0e4d-3b69-44bd-b9a3-366afb1be30a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=3a4264a52b3112d93761ccd942c4b900aca216b05d7d2d4a3f7431f716c4cdb5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-251.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-05T03:10:09Z" lastUpdateTime: "2026-09-05T03:10:09Z" message: Auto-approved CSR "csr-98zhf" reason: AutoApproved status: "True" type: Approved