--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:41:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:41:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T17:41:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T17:41:32Z" name: csr-dksc8 resourceVersion: "6566" uid: ab2f701c-48fa-4ca7-96b6-b97ef2ab10fa spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=bc2d82873e3e64c6757f8125e9d74ee2eeae0cbb5127992f3881773c1492c736 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-161.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T17:41:32Z" lastUpdateTime: "2026-09-10T17:41:32Z" message: Auto-approved CSR "csr-dksc8" reason: AutoApproved status: "True" type: Approved