--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T14:59:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T14:59:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-11T14:59:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-11T14:59:24Z" name: csr-862hd resourceVersion: "6446" uid: 95227e4c-55ec-4aca-b6ec-b72bfbc2fc52 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=29aa54d1b13020bd2347772b7886d7d96ba70207c3b46f9533037617baaf8ca6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-43.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T14:59:24Z" lastUpdateTime: "2026-06-11T14:59:24Z" message: Auto-approved CSR "csr-862hd" reason: AutoApproved status: "True" type: Approved