--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T18:36:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T18:36:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-10-30T18:36:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-30T18:36:59Z" name: csr-xmsbq resourceVersion: "5464" uid: ff946b51-e134-4e5f-90d9-3b371e8d53b4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2b00852ad40b47da33db927a78b9eb6e50eda193826abff335aa5821ed51ac46 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-87.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T18:36:59Z" lastUpdateTime: "2026-10-30T18:36:59Z" message: Auto-approved CSR "csr-xmsbq" reason: AutoApproved status: "True" type: Approved