--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T14:38:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T14:38:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T14:38:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T14:38:26Z" name: csr-k8lpn resourceVersion: "6041" uid: 5d519b52-2278-4f96-9772-676132dfeb10 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=579ddf3bf76feecddfc9f0ffd1e509150ef8f3a781f56466eb8fe1c2ad09d75f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-1.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T14:38:26Z" lastUpdateTime: "2026-05-21T14:38:26Z" message: Auto-approved CSR "csr-k8lpn" reason: AutoApproved status: "True" type: Approved