--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T15:42:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T15:42:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T15:42:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T15:42:29Z" name: csr-m5r7s resourceVersion: "5919" uid: f15c64d4-9b1e-4f81-bf0e-a57d34c43fa8 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=83237a04e6681356554777cf5db060bb1ca7ba164106cb1079708f62862e3784 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-107.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T15:42:29Z" lastUpdateTime: "2026-09-10T15:42:29Z" message: Auto-approved CSR "csr-m5r7s" reason: AutoApproved status: "True" type: Approved