--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T14:39:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T14:39:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-01T14:39:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-01T14:39:09Z" name: csr-lnq8j resourceVersion: "6598" uid: 972f250d-bd67-4fd1-b9fa-5373855c9472 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=378d45b25b35b4c4df1c5d9cc648a291bb30cd02d0852fcc68df9376e2883be2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-59.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T14:39:09Z" lastUpdateTime: "2026-07-01T14:39:09Z" message: Auto-approved CSR "csr-lnq8j" reason: AutoApproved status: "True" type: Approved