--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T18:13:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T18:13:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-20T18:13:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-20T18:13:54Z" name: csr-hbcfk resourceVersion: "7014" uid: 8790b971-0654-49df-be0e-1289e7ecf499 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=0dfc8da8c6fbd95cd9b051ff10d7ee6006665ae0dc48e8ec0c0b8e9b0163140f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-142-149.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T18:13:54Z" lastUpdateTime: "2026-07-20T18:13:54Z" message: Auto-approved CSR "csr-hbcfk" reason: AutoApproved status: "True" type: Approved