--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T14:11:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T14:11:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-07T14:11:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-07T14:11:03Z" name: csr-tgwcr resourceVersion: "6683" uid: d6ac3292-0680-4922-a4b0-b688098fb399 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a42d598ad467a272992d110522dc22edc63442e542bf42a58ff10a673b628a54 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-97.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T14:11:03Z" lastUpdateTime: "2026-09-07T14:11:03Z" message: Auto-approved CSR "csr-tgwcr" reason: AutoApproved status: "True" type: Approved