--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T18:14:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T18:14:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T18:14:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T18:14:19Z" name: csr-rfltk resourceVersion: "6885" uid: 72bd552e-8e6d-445a-a0bb-b086ee257967 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=740a7403bb0ceedb6818f11df6f6908034ac24580709dd442860e429bcbd05a4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-244.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T18:14:19Z" lastUpdateTime: "2026-05-21T18:14:19Z" message: Auto-approved CSR "csr-rfltk" reason: AutoApproved status: "True" type: Approved