--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T20:21:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T20:21:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T20:21:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T20:21:10Z" name: csr-hwsr9 resourceVersion: "5912" uid: a301f194-3231-465f-b65a-31c1350cc54f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6ddeb648b1e0aeaf5122f3a85e11f189cf75eaa2689e8312f795cfb69be733eb groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-74.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T20:21:10Z" lastUpdateTime: "2026-05-21T20:21:10Z" message: Auto-approved CSR "csr-hwsr9" reason: AutoApproved status: "True" type: Approved