--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T14:19:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T14:19:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T14:19:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T14:19:42Z" name: csr-zc68c resourceVersion: "6378" uid: b74c6e4d-84a0-487d-8a8a-6e7e81b71827 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=32e08b5c54a43e65bba02646afaa987b9a547c8729ab0a64719be443bf3cd751 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-234.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T14:19:42Z" lastUpdateTime: "2026-09-10T14:19:42Z" message: Auto-approved CSR "csr-zc68c" reason: AutoApproved status: "True" type: Approved