--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-24T14:25:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-24T14:25:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-24T14:25:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-24T14:25:02Z" name: csr-dfbq2 resourceVersion: "6699" uid: e1aa627a-974a-4b04-8e87-15eb235da326 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6ba8f5900a347abb4344e2079bd782dbef10cae5ddf000be0d52c0b1977ef485 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-82.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-24T14:25:02Z" lastUpdateTime: "2026-04-24T14:25:02Z" message: Auto-approved CSR "csr-dfbq2" reason: AutoApproved status: "True" type: Approved