--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-23T13:32:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-23T13:32:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-23T13:32:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-23T13:32:33Z" name: csr-tkwgp resourceVersion: "6151" uid: d234ab76-6265-45b2-aa01-cedb7f0b4586 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2801c6435e97d3212f2dec131f3ec68db81bf2f3dfadd3086d691a119bcb0ca8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-207.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-23T13:32:33Z" lastUpdateTime: "2026-04-23T13:32:33Z" message: Auto-approved CSR "csr-tkwgp" reason: AutoApproved status: "True" type: Approved