--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T15:04:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T15:04:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-11T15:04:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-11T15:04:18Z" name: csr-l9qnn resourceVersion: "6941" uid: b8f6d75c-f39e-4e8f-9a20-9988683279c7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6641ec8da290f453aea441d33ba266befe054ffa9b84194a520cb244e275a939 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-140-64.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T15:04:18Z" lastUpdateTime: "2026-06-11T15:04:18Z" message: Auto-approved CSR "csr-l9qnn" reason: AutoApproved status: "True" type: Approved