--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T20:04:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T20:04:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-07-27T20:04:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T20:04:21Z" name: csr-hm8qk resourceVersion: "6498" uid: 24aab726-830f-4c94-a232-e8270f414b33 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=16084e180db4d3bf269a1873934e8d356098757304b301486630269f4ab1b99d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T20:04:21Z" lastUpdateTime: "2026-07-27T20:04:21Z" message: Auto-approved CSR "csr-hm8qk" reason: AutoApproved status: "True" type: Approved