--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-20T20:24:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-20T20:24:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-20T20:24:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-20T20:24:47Z" name: csr-cmbct resourceVersion: "6601" uid: b1a14182-e252-47ab-9069-4fd38605ab75 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4aae5e84241fa2cdb79e3113ed77188e55d5bb938d4030dd76be0c3054be56fa groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-8.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-20T20:24:47Z" lastUpdateTime: "2026-05-20T20:24:47Z" message: Auto-approved CSR "csr-cmbct" reason: AutoApproved status: "True" type: Approved