--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-29T21:46:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-29T21:46:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-10-29T21:46:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-29T21:46:05Z" name: csr-2cncb resourceVersion: "5549" uid: c9716170-6bb0-48b3-9587-5990497d13ba spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a5dcc6b2ad3ce70bc83e638355a31ecde9ea0e96b211a8d40486d6b78e07bf43 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-85.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-29T21:46:05Z" lastUpdateTime: "2026-10-29T21:46:05Z" message: Auto-approved CSR "csr-2cncb" reason: AutoApproved status: "True" type: Approved