--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T22:49:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-10-31T22:49:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-31T22:49:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T22:49:49Z" name: csr-rm2sq resourceVersion: "6854" uid: 309a1a24-b3e8-4d71-8f84-26e1d6eb48e3 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=128b09b6702d438b7f238e766fca623e6d8c609d0490b5ad915ef4c211ee68a6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-157.us-east-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T22:49:31Z" lastUpdateTime: "2026-10-31T22:49:31Z" message: Auto-approved CSR "csr-rm2sq" reason: AutoApproved status: "True" type: Approved