--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T20:04:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T20:04:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T20:04:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T20:04:39Z" name: csr-hkpx4 resourceVersion: "6919" uid: 25a434ed-12a6-4180-9333-4240bdf627da spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ea82a965a469c5e8cd4e6de3fd7e6fb697a7bd1d7576fa342fe2958a92504b71 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-149.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T20:04:39Z" lastUpdateTime: "2026-07-27T20:04:39Z" message: Auto-approved CSR "csr-hkpx4" reason: AutoApproved status: "True" type: Approved