--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T17:39:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T17:39:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-02T17:39:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-02T17:39:36Z" name: csr-9l8sj resourceVersion: "5627" uid: 19e93c2d-60e7-4cdc-94ab-642b229223f6 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=cce935db988ce453078bb82d90b9149673d80881c8e37f30bcee0d55b6c3231e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-5.us-east-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T17:39:36Z" lastUpdateTime: "2026-11-02T17:39:36Z" message: Auto-approved CSR "csr-9l8sj" reason: AutoApproved status: "True" type: Approved