--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T16:25:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T16:25:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-08T16:25:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-08T16:25:40Z" name: csr-xd5fj resourceVersion: "6776" uid: 815c44c3-945a-4791-98a3-3a4c7fdf511c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d2f0c4883d6e054dfe119abfc855e660ae18c8497323d02ff0c0be41d855f58b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-36.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T16:25:40Z" lastUpdateTime: "2026-06-08T16:25:40Z" message: Auto-approved CSR "csr-xd5fj" reason: AutoApproved status: "True" type: Approved