--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-12T22:21:08Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-12T22:21:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-12T22:21:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-12T22:21:08Z" name: csr-fvq5g resourceVersion: "6942" uid: 972e64a4-9d7c-4045-a8e0-31bddddb6213 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b02840548f9e75271bed9fa1b1ab196185ced0f3a767242a668d62f0ac1165aa groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-221.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-12T22:21:08Z" lastUpdateTime: "2026-06-12T22:21:08Z" message: Auto-approved CSR "csr-fvq5g" reason: AutoApproved status: "True" type: Approved