--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T14:06:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-10-30T14:06:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-30T14:06:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T14:07:02Z" name: csr-2s9m6 resourceVersion: "6804" uid: 53025014-2180-472d-9bea-304aeddd3d9c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=af985f835cd418646e0ad0e3135345b0a1c92aea63054ca22de3052ef8db6885 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-107.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T14:06:45Z" lastUpdateTime: "2026-10-30T14:06:45Z" message: Auto-approved CSR "csr-2s9m6" reason: AutoApproved status: "True" type: Approved