--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T16:01:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T16:01:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T16:01:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T16:01:22Z" name: csr-lwlss resourceVersion: "7011" uid: ccc89a4e-2c03-4441-a1dd-0f7077365475 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ab28afb804f0f7471fefc41b6a5ecc3a57513b92ebbd09756d684bdcdc681433 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-253.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T16:01:22Z" lastUpdateTime: "2026-07-27T16:01:22Z" message: Auto-approved CSR "csr-lwlss" reason: AutoApproved status: "True" type: Approved