--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T23:59:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T23:59:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-18T23:59:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T23:59:01Z" name: csr-r4cfl resourceVersion: "7441" uid: dfa61505-85fe-4130-b93b-df406dc53c26 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=417fd931d41857995232f8eca7d03c17eebb0e51f5d68fe7cb0a4fca7b092203 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJ6Q0Jyd0lCQURCTk1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRNd01RWURWUVFERXlwegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRJNUxURTBOaTVsWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxCmhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUklRWU8yeFc1ZlZhN29kc0x2eFRoM0JWN3E5UzdnNHovYzVhUm0KeGJXZTRHTTVwRVVOMlZyMEFuM1J3N0JuSHFpNmFNT2xHSHlzd3ZYbEM3S1RncFdXb0FBd0NnWUlLb1pJemowRQpBd0lEUndBd1JBSWdFTzAydkM2OTE1UkxkM2kwaEhnQU1mNDhuWmxFbjF5K1hEUDNKQm9rT2UwQ0lDanRXemZLCjdLY1EzMWkydnFzV2RGOVhzMEJKZGpqWWZXakkvSzdIWGJLQwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-146.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T23:59:01Z" lastUpdateTime: "2026-09-18T23:59:01Z" message: Auto-approved CSR "csr-r4cfl" reason: AutoApproved status: "True" type: Approved