--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T07:03:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T07:03:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-20T07:03:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-20T07:03:04Z" name: csr-szdc7 resourceVersion: "6098" uid: 848d46d8-062f-4fa0-b4b1-90604e1ab939 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=359ce3f3ba34d5902f50a70a3135dfe67a9fe6c39c1491d29870bcb40c2d8e6c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-100.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T07:03:04Z" lastUpdateTime: "2026-04-20T07:03:04Z" message: Auto-approved CSR "csr-szdc7" reason: AutoApproved status: "True" type: Approved