--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T17:28:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T17:28:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-17T17:28:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T17:28:05Z" name: csr-r8q4q resourceVersion: "6321" uid: 1ed2aa23-948a-435c-9a59-8138f8789be5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6f79d6c047965ace82cecdd93dbdd9d94753b57c744ca0bf509052d7b8c85d01 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-167.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T17:28:05Z" lastUpdateTime: "2026-09-17T17:28:05Z" message: Auto-approved CSR "csr-r8q4q" reason: AutoApproved status: "True" type: Approved