--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T15:18:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T15:18:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-26T15:18:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-26T15:18:50Z" name: csr-hlwgk resourceVersion: "6965" uid: 34aa1035-9b5e-467c-9e33-cceaa8b5158b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=db58b201199e4cfbb2f7d4c4f771dc538f86cc0d160bbe1539a72cbd8eea9358 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-42.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T15:18:50Z" lastUpdateTime: "2026-05-26T15:18:50Z" message: Auto-approved CSR "csr-hlwgk" reason: AutoApproved status: "True" type: Approved