--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T23:56:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T23:56:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-06T23:56:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-06T23:56:35Z" name: csr-hpqb4 resourceVersion: "6333" uid: fccdbc40-5066-4ff8-be03-1fb20e3feed2 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ade17c05fe93267a8194d6d79609bad8150fa99410331c0f1687a8917f6c3390 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T23:56:35Z" lastUpdateTime: "2026-07-06T23:56:35Z" message: Auto-approved CSR "csr-hpqb4" reason: AutoApproved status: "True" type: Approved