--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T21:58:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T21:58:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T21:58:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T21:58:42Z" name: csr-nnht4 resourceVersion: "7239" uid: ba90fa0e-8535-45d8-b769-b1264c9867c4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=315c2404b4e1cbb199dd7728861e91be682cf41800fa41d77c94d3aa9a68a4e8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-9.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T21:58:42Z" lastUpdateTime: "2026-09-17T21:58:42Z" message: Auto-approved CSR "csr-nnht4" reason: AutoApproved status: "True" type: Approved