--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T16:22:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T16:22:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-09T16:22:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-09T16:22:30Z" name: csr-gpkhc resourceVersion: "6936" uid: a7da2078-cefd-48b9-b3cc-130ec5fc204e spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5016be43506f1ea4418c4041608b5ad3a1148e9f2dd5af56f431712adb8ccc0f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-56.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T16:22:30Z" lastUpdateTime: "2026-07-09T16:22:30Z" message: Auto-approved CSR "csr-gpkhc" reason: AutoApproved status: "True" type: Approved