--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T20:21:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T20:21:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-18T20:21:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T20:21:04Z" name: csr-llfp2 resourceVersion: "7324" uid: 54827c0f-746d-4978-8ee4-6310e5862f44 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=739d85edbff5aca72ef2cdd93e9a31213521ba38c8e44ce028d00d533d1a54df groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-28.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T20:21:04Z" lastUpdateTime: "2026-09-18T20:21:04Z" message: Auto-approved CSR "csr-llfp2" reason: AutoApproved status: "True" type: Approved