--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T17:20:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T17:20:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-08-05T17:20:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-08-05T17:20:13Z" name: csr-qff2m resourceVersion: "7168" uid: cc4b1ffe-6e31-4328-83fc-daff76b9ba76 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=836e97fc2a0de4980378f4af9ed4204531c675f1197e6d5c25993a04b51dd9c4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-37.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-08-05T17:20:13Z" lastUpdateTime: "2026-08-05T17:20:13Z" message: Auto-approved CSR "csr-qff2m" reason: AutoApproved status: "True" type: Approved