--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T09:27:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T09:27:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-17T09:27:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-17T09:27:25Z" name: csr-lmxfk resourceVersion: "6779" uid: 46f100da-ddd4-4a82-9d81-2306ea508184 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=94d6e69f3498efb2b1a86d1e450c4cb8f592437d31dbae8e4721b62c255ea8bc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-244.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T09:27:25Z" lastUpdateTime: "2026-07-17T09:27:25Z" message: Auto-approved CSR "csr-lmxfk" reason: AutoApproved status: "True" type: Approved