--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T18:59:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T18:59:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-10T18:59:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-10T18:59:29Z" name: csr-9h897 resourceVersion: "7066" uid: 10e56333-08c3-4fc8-b79b-65451d9aa5e5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ef60c12891d47f0d3be3b85db227d52cdf45ee264e2df6b6881b7cefafe211e0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-108.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-10T18:59:29Z" lastUpdateTime: "2026-06-10T18:59:29Z" message: Auto-approved CSR "csr-9h897" reason: AutoApproved status: "True" type: Approved