--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T21:37:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T21:37:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-06-11T21:37:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-11T21:37:04Z" name: csr-hkjqr resourceVersion: "7132" uid: 2ba12ff1-cfee-4c75-b432-6d9dbdf7ca05 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f0afc517c6c8593b8249ee5f462e8ba058353e2be8b3c3d48ac93802e595f541 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-216.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T21:37:04Z" lastUpdateTime: "2026-06-11T21:37:04Z" message: Auto-approved CSR "csr-hkjqr" reason: AutoApproved status: "True" type: Approved