--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T00:04:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T00:04:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-23T00:04:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-23T00:04:45Z" name: csr-kdnn9 resourceVersion: "7061" uid: 88803005-6156-48a0-b868-113666cb9b4c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f5c559dc1a34db257bc7ec587595852426ec7d0a5ecb72811c75f79056541c14 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-249.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T00:04:45Z" lastUpdateTime: "2026-07-23T00:04:45Z" message: Auto-approved CSR "csr-kdnn9" reason: AutoApproved status: "True" type: Approved