--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-14T02:52:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-14T02:52:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-14T02:52:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-14T02:52:44Z" name: csr-l77gg resourceVersion: "5770" uid: 6ae65439-d2d0-4473-b580-c522514999ae spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b5c4b0ca36836cb0353658db3bab73bd9ab36ed2fe5a69f330084ef2f68fd981 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-244.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-14T02:52:44Z" lastUpdateTime: "2026-09-14T02:52:44Z" message: Auto-approved CSR "csr-l77gg" reason: AutoApproved status: "True" type: Approved