--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T20:03:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T20:03:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-03T20:03:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-03T20:03:19Z" name: csr-r7hhr resourceVersion: "5510" uid: 84150523-ea40-42a4-9767-0ebc830f4d03 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5aeeabb7946f5cb85eb00ab747a916392ef980727acf73494006aa661b0911d5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-102.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T20:03:19Z" lastUpdateTime: "2026-11-03T20:03:19Z" message: Auto-approved CSR "csr-r7hhr" reason: AutoApproved status: "True" type: Approved