--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T17:15:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T17:15:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-21T17:15:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T17:15:16Z" name: csr-mfgrf resourceVersion: "7736" uid: e4b829f1-2bee-4ee5-9b51-af6f06c9d1c5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d57ee9626cff306252f52b9f3074f97a02f92de3184432ce20e0765a21a1cfbc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-79.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T17:15:16Z" lastUpdateTime: "2026-07-21T17:15:16Z" message: Auto-approved CSR "csr-mfgrf" reason: AutoApproved status: "True" type: Approved