--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T18:40:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T18:40:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-10T18:40:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T18:40:16Z" name: csr-hnclm resourceVersion: "6462" uid: 2a1dbab9-31c1-4bc8-a585-2655f8b0b274 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c7f672e97438be4ba023459d346f5e37372ad46850466cb5c726dc1986e7b844 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0Jzd0lCQURCUk1Sa3dGd1lEVlFRS0V4QnplWE4wWlcwNmIzWnVMVzV2WkdWek1UUXdNZ1lEVlFRRApFeXR6ZVhOMFpXMDZiM1p1TFc1dlpHVTZhWEF0TVRBdE1DMHhORE10TVRjdVpXTXlMbWx1ZEdWeWJtRnNNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFRlI3aW41NnFNRCs1TWF5TXdDSXB1WTRwajEwUjMrMFkKK2pFd1RocU9XK1RIRUVmakpVUUlsaHA1WnFTb0dJNmNLNTV0SWJncFNJVDJSSm5NZWxlRVdxQUFNQW9HQ0NxRwpTTTQ5QkFNQ0EwZ0FNRVVDSUYzVWR3emVWU1F3V1VZdUpPSlVFZHEyNmZxOUxUbmlIZExhdlpQZjV2aFlBaUVBCjRqUjFROUxiRFRNdVVEZk5DcGFadzBrQWU1ZFB3ems1bnFQRjBueGR5dGM9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-17.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T18:40:16Z" lastUpdateTime: "2026-07-10T18:40:16Z" message: Auto-approved CSR "csr-hnclm" reason: AutoApproved status: "True" type: Approved