--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T16:26:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T16:26:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-15T16:26:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-15T16:26:45Z" name: csr-ljccx resourceVersion: "7452" uid: ccaab0ca-0a00-459a-8c90-1d73f0b06f23 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=edd081170216d6641e309f712bd967a2be40149d5ad087f28a9705b7ebd22306 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-12.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T16:26:45Z" lastUpdateTime: "2026-09-15T16:26:45Z" message: Auto-approved CSR "csr-ljccx" reason: AutoApproved status: "True" type: Approved