--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T20:14:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-11-02T20:14:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-02T20:14:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T20:14:53Z" name: csr-hwrtv resourceVersion: "6770" uid: f56b758e-a235-4e93-b580-bf7d03eff7a5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=48008b17785471f72f3ce30eaa251ef3c188c52697523ee1fd7b24c4e9cb72c4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-134-201.us-west-2.compute.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T20:14:42Z" lastUpdateTime: "2026-11-02T20:14:42Z" message: Auto-approved CSR "csr-hwrtv" reason: AutoApproved status: "True" type: Approved