--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T12:47:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T12:47:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-11T12:47:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-11T12:47:30Z" name: csr-mcprp resourceVersion: "6675" uid: a2d48bf2-1405-4be7-a510-00d92d73b70a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=de65302702a8879bd68e995b5ce75a636d22f4a3017b6723c7173f3bf5f34389 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-225.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T12:47:30Z" lastUpdateTime: "2026-09-11T12:47:30Z" message: Auto-approved CSR "csr-mcprp" reason: AutoApproved status: "True" type: Approved