--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T11:25:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T11:25:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-15T11:25:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-15T11:25:25Z" name: csr-khd2k resourceVersion: "6394" uid: ad8a715b-0d80-4899-b102-1952eef084f9 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b086af8d7c173070cdfeb3773b01a67230ac89e766a6fc0c7cb109a63c99b965 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-2.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T11:25:25Z" lastUpdateTime: "2026-07-15T11:25:25Z" message: Auto-approved CSR "csr-khd2k" reason: AutoApproved status: "True" type: Approved