--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-27T23:33:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-27T23:33:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-27T23:33:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-27T23:33:55Z" name: csr-hdxzm resourceVersion: "6725" uid: ce073a16-cf34-4d60-8449-806ddb7ed497 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=72dd1df753a6ea2179527a1d11914b692dc1ad33bd14002f92244bd99b969fdc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-189.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-27T23:33:55Z" lastUpdateTime: "2026-05-27T23:33:55Z" message: Auto-approved CSR "csr-hdxzm" reason: AutoApproved status: "True" type: Approved