--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T18:24:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T18:24:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-08T18:24:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-08T18:24:05Z" name: csr-cbf8h resourceVersion: "6917" uid: 07b643dc-4049-444c-b922-0adc767866d5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=83f69e01cab5c5d82266dd5a2522a6f09a0c4da91325f73b49a09aa7f0420756 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-112.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T18:24:05Z" lastUpdateTime: "2026-09-08T18:24:05Z" message: Auto-approved CSR "csr-cbf8h" reason: AutoApproved status: "True" type: Approved