--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T04:26:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T04:26:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T04:26:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T04:26:45Z" name: csr-hk725 resourceVersion: "7209" uid: 7922690b-40b4-433e-804c-3530bec51482 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=03ada29e6db1a66c63e68c93c5527593296acf392436c4975af018b3bd7f5e8f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-39.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T04:26:45Z" lastUpdateTime: "2026-09-10T04:26:45Z" message: Auto-approved CSR "csr-hk725" reason: AutoApproved status: "True" type: Approved