--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T17:34:37Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T17:34:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T17:34:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T17:34:37Z" name: csr-nr4vs resourceVersion: "6273" uid: 44a2483d-b967-492a-be05-cbdd63c1752a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b7d90981ec65e2551c559b878e90fa18f4be8eb6efb5196ccdabda2ab43a1ecc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-20.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T17:34:37Z" lastUpdateTime: "2026-09-17T17:34:37Z" message: Auto-approved CSR "csr-nr4vs" reason: AutoApproved status: "True" type: Approved