--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T17:24:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T17:24:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-16T17:24:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-16T17:24:47Z" name: csr-kj6d9 resourceVersion: "5917" uid: 6c6c5824-9f1e-400e-acde-84f7941843e8 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d2d433a944e850971c96a906c72bcf23dd2d1e5343fcc580de87cd66f26e030d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-96.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T17:24:47Z" lastUpdateTime: "2026-09-16T17:24:47Z" message: Auto-approved CSR "csr-kj6d9" reason: AutoApproved status: "True" type: Approved