--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T17:41:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T17:41:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T17:41:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T17:41:09Z" name: csr-df782 resourceVersion: "6485" uid: c99853ce-34a3-4b1c-92de-f761675df72a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e4901dad36d8cca7c1336567c7ad1b0e543c85d5b338ce2327492cef61223275 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-189.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T17:41:09Z" lastUpdateTime: "2026-09-18T17:41:09Z" message: Auto-approved CSR "csr-df782" reason: AutoApproved status: "True" type: Approved