--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T16:02:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T16:02:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-04-21T16:02:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-21T16:02:09Z" name: csr-hwk2r resourceVersion: "6232" uid: b3049d22-7b54-4440-bf28-757ada20dcd3 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c0e84d122ba675ac011d40e6123f44ec11c07971aa37efca3272648e884c5cb1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-96.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-21T16:02:09Z" lastUpdateTime: "2026-04-21T16:02:09Z" message: Auto-approved CSR "csr-hwk2r" reason: AutoApproved status: "True" type: Approved