--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T16:09:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T16:09:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-11T16:09:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-11T16:09:20Z" name: csr-kfmtj resourceVersion: "7309" uid: 7368fa55-c12e-425b-9135-87c327ef15a1 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e7dd87023cb28cd1fa217d039335a756aebeef7b3310e8d71b01a75680699654 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-8.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T16:09:20Z" lastUpdateTime: "2026-06-11T16:09:20Z" message: Auto-approved CSR "csr-kfmtj" reason: AutoApproved status: "True" type: Approved