--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T08:00:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T08:00:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-11T08:00:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-11T08:00:00Z" name: csr-4fc9f resourceVersion: "6688" uid: 6f404fa8-24ee-4928-9b24-e5cbda1db8c3 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5023206a8d7ef011ab38118d541d9079b5dbeba416557818381d48993479de97 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-93.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T08:00:00Z" lastUpdateTime: "2026-09-11T08:00:00Z" message: Auto-approved CSR "csr-4fc9f" reason: AutoApproved status: "True" type: Approved