--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T18:37:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T18:37:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-10-30T18:37:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-30T18:37:29Z" name: csr-kkcqb resourceVersion: "5369" uid: 7c72f2ab-482f-4132-a675-cc30db0fa8fc spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4b4bb9d8ddc9fc406e3bddf9ad09535cd3715bf46b35484da2e499afe24b8ddc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-68.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T18:37:29Z" lastUpdateTime: "2026-10-30T18:37:29Z" message: Auto-approved CSR "csr-kkcqb" reason: AutoApproved status: "True" type: Approved