--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T08:46:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T08:46:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-25T08:46:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-25T08:46:45Z" name: csr-cmvnr resourceVersion: "6387" uid: a305091f-0e26-4d33-855c-7bfa2e9e5789 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d1721496ee921cb9b0f1065ae22bc5f2835d3bdfa47c5b0c62d9ab18df6b7f9d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-205.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-25T08:46:45Z" lastUpdateTime: "2026-05-25T08:46:45Z" message: Auto-approved CSR "csr-cmvnr" reason: AutoApproved status: "True" type: Approved