--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-20T13:50:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-20T13:50:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-20T13:50:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-20T13:50:42Z" name: csr-nwrb5 resourceVersion: "6214" uid: 3af61733-4d1f-49f6-bcec-857e29a4be00 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=aa7b0a050e2698e7d13c6225a49df81f8b4208ea4bca23e95a38c5515c873879 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-251.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-20T13:50:42Z" lastUpdateTime: "2026-05-20T13:50:42Z" message: Auto-approved CSR "csr-nwrb5" reason: AutoApproved status: "True" type: Approved