--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T03:48:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T03:48:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-04T03:48:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-04T03:48:57Z" name: csr-67sd9 resourceVersion: "5475" uid: 0ae16adb-ed94-4b72-9bce-b9003d2eb1b2 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=77b94a822aa0095355ecf49f4a63df723344bf90826ba04f682d7328b5221b19 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-9.us-east-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T03:48:57Z" lastUpdateTime: "2026-11-04T03:48:57Z" message: Auto-approved CSR "csr-67sd9" reason: AutoApproved status: "True" type: Approved