--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T16:12:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T16:12:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-05-21T16:12:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-21T16:12:00Z" name: csr-hqhb4 resourceVersion: "6598" uid: e17e7992-c01f-47a6-8858-f130d9b872c7 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=aa0e4400470fd83cde538a0848643001b9204fd283bc9c7f7fb237bcd065785e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-146.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T16:12:00Z" lastUpdateTime: "2026-05-21T16:12:00Z" message: Auto-approved CSR "csr-hqhb4" reason: AutoApproved status: "True" type: Approved