--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T13:31:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T13:31:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-08T13:31:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-08T13:31:29Z" name: csr-dclrn resourceVersion: "6864" uid: c52be718-dd04-4b27-8815-4da42ac1ab66 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9b686a1b9c2b77ed42adf7cd9dc84bd6293eb1ec627ed85caf5521542b925b1e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-71.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T13:31:29Z" lastUpdateTime: "2026-06-08T13:31:29Z" message: Auto-approved CSR "csr-dclrn" reason: AutoApproved status: "True" type: Approved