--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T22:04:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T22:04:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-28T22:04:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-28T22:04:44Z" name: csr-hnck8 resourceVersion: "6977" uid: e5c5fc3f-b0c1-4ee5-8dba-6a66d2c40801 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=8ae162420164df087ec2cfefca9d0cf40fd775e07e953ee5425c331674bc43c5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-9.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T22:04:44Z" lastUpdateTime: "2026-07-28T22:04:44Z" message: Auto-approved CSR "csr-hnck8" reason: AutoApproved status: "True" type: Approved