--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:47:08Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:47:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-22T18:47:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-22T18:47:08Z" name: csr-srf9s resourceVersion: "6468" uid: 52034248-062f-477b-b3d0-0889b8a6ac68 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=041206b88951efae1ae345538b73751f295dde908c8e6e6c9955ddd9067416a7 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-109.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T18:47:08Z" lastUpdateTime: "2026-04-22T18:47:08Z" message: Auto-approved CSR "csr-srf9s" reason: AutoApproved status: "True" type: Approved