--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T16:19:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T16:19:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-10-30T16:19:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-30T16:19:22Z" name: csr-54fhk resourceVersion: "5006" uid: 8559d797-3d75-488e-bfda-6a1c2c8b4835 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b211afaa60fc7bd26c05c7acd2b3049ffe0be482eece50405bb31e435c515da1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-40.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T16:19:22Z" lastUpdateTime: "2026-10-30T16:19:22Z" message: Auto-approved CSR "csr-54fhk" reason: AutoApproved status: "True" type: Approved