--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T07:25:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T07:25:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-15T07:25:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-15T07:25:17Z" name: csr-s8k66 resourceVersion: "6907" uid: c6362c27-36b6-4d93-822d-882b4dea5be9 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=963ec9ca10c99f7f1194bc3dc1aa2a1e95e7d8761f244d1e31ebd10eab61afeb groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-67.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T07:25:17Z" lastUpdateTime: "2026-09-15T07:25:17Z" message: Auto-approved CSR "csr-s8k66" reason: AutoApproved status: "True" type: Approved