--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-03T21:06:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-03T21:06:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-03T21:06:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-03T21:06:20Z" name: csr-chqrq resourceVersion: "7012" uid: 21f15c0b-3578-4fd4-88fa-cc33ceddb250 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2c0fa66a105b17af1c033c80ae137a8a62594468c80beeb098e04980d920d844 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-28.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-03T21:06:20Z" lastUpdateTime: "2026-06-03T21:06:20Z" message: Auto-approved CSR "csr-chqrq" reason: AutoApproved status: "True" type: Approved