--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T07:03:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T07:03:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-21T07:03:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-21T07:03:20Z" name: csr-pz98l resourceVersion: "6299" uid: 75064fd5-a3cd-410e-85b8-6faabd669cf1 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=a1c8a027e51c1083c9340b33e647ece9aa5070d3031b5f88a563d1bf261fe803 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-69.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-21T07:03:20Z" lastUpdateTime: "2026-04-21T07:03:20Z" message: Auto-approved CSR "csr-pz98l" reason: AutoApproved status: "True" type: Approved