--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T17:34:37Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T17:34:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T17:34:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T17:34:37Z" name: csr-w4hvh resourceVersion: "6250" uid: 94cb8b1b-9d3d-4db5-9972-89c030e84e81 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=dfa0cbf521c4df69ef4edb84455340bccb79c18854c7b8486b208cc766a93062 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-248.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T17:34:37Z" lastUpdateTime: "2026-09-17T17:34:37Z" message: Auto-approved CSR "csr-w4hvh" reason: AutoApproved status: "True" type: Approved