--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T19:05:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T19:05:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-16T19:05:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-16T19:05:50Z" name: csr-l9hd2 resourceVersion: "6771" uid: 88e7838a-a6d2-476d-84fd-5fc346c644fa spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=70ca5d029ac52a68f08c03fc4db7d14da3a5c8a1bcc7dc185d47b76347a4c82e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-236.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T19:05:50Z" lastUpdateTime: "2026-09-16T19:05:50Z" message: Auto-approved CSR "csr-l9hd2" reason: AutoApproved status: "True" type: Approved