--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T11:12:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T11:12:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T11:12:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T11:12:40Z" name: csr-rmffc resourceVersion: "6702" uid: a5cec3d4-6910-4376-a164-8e6035bb9f78 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=580b2814f3b8fbbacca0a67adbc2eac5edaa130443f703517586795a5b9c9669 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-73.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T11:12:40Z" lastUpdateTime: "2026-09-10T11:12:40Z" message: Auto-approved CSR "csr-rmffc" reason: AutoApproved status: "True" type: Approved