--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-15T05:48:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-15T05:48:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-15T05:48:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-15T05:48:44Z" name: csr-c42q4 resourceVersion: "7290" uid: dc023c03-fab8-4409-9f55-a78a85257b77 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=0f2877ad52a51d100dbe71d5ba44a3f5a28b2a18b4fcf268ca8c28032899afcd groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-138.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-15T05:48:44Z" lastUpdateTime: "2026-06-15T05:48:44Z" message: Auto-approved CSR "csr-c42q4" reason: AutoApproved status: "True" type: Approved