--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-05T03:18:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-05T03:18:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-05T03:18:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-05T03:18:52Z" name: csr-gj54h resourceVersion: "7759" uid: 39c5cd5d-82f3-496f-bd1c-176fab6cf272 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c765c2fa1ee4322efffaea53a6c8cd4bcd591f013cb14da14c22a5b4c9cc0ea8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-65.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-05T03:18:46Z" lastUpdateTime: "2026-06-05T03:18:46Z" message: Auto-approved CSR "csr-gj54h" reason: AutoApproved status: "True" type: Approved