--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T19:20:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T19:20:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-10-30T19:20:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-10-30T19:20:26Z" name: csr-d5xtr resourceVersion: "5768" uid: 9fb64af9-3123-4328-8745-d228518c3dd8 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5e0b0f880d165bb5a9d33eef028496ae463ebf3122be857c98100752defcfbf2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-21.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T19:20:26Z" lastUpdateTime: "2026-10-30T19:20:26Z" message: Auto-approved CSR "csr-d5xtr" reason: AutoApproved status: "True" type: Approved