--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-29T16:57:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-29T16:57:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-29T16:57:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-29T16:57:26Z" name: csr-wsz2r resourceVersion: "6439" uid: b1348d89-ceef-43f9-83db-e901dbae34ba spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5006cd3fcad2c30cb2443e074003cb3e5c206eb7130b0c0173081682df2c0470 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-169.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-29T16:57:26Z" lastUpdateTime: "2026-05-29T16:57:26Z" message: Auto-approved CSR "csr-wsz2r" reason: AutoApproved status: "True" type: Approved