--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T23:37:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T23:37:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T23:37:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T23:37:15Z" name: csr-q4x4x resourceVersion: "7488" uid: c7cddb2f-b249-44d7-8bb3-d1123dce2ca7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2f922dacf0ae157e9e0fd5d38381800bc7d198c1c13e565260ecda1a1c59c2fd groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-128.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T23:37:15Z" lastUpdateTime: "2026-09-10T23:37:15Z" message: Auto-approved CSR "csr-q4x4x" reason: AutoApproved status: "True" type: Approved