--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T21:52:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T21:52:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-12T21:52:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-12T21:52:46Z" name: csr-k87fb resourceVersion: "6353" uid: 74bd887a-06a7-4c74-b18e-862f380dd567 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e3b62eab03e21c3bc297e1663ffc85f4c51fd35d5a43eece3530b3d64f0b52ab groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-23.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T21:52:46Z" lastUpdateTime: "2026-07-12T21:52:46Z" message: Auto-approved CSR "csr-k87fb" reason: AutoApproved status: "True" type: Approved