--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T10:07:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T10:07:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-08T10:07:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-08T10:07:28Z" name: csr-k5s2b resourceVersion: "7867" uid: e35e5ee2-9f06-452b-ad3d-3a8fb9d7f1c3 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d8bfa88b3cb29a401f0941e9776784d291f865b5fc682a0edab3255e3c0e765c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-137.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T10:07:28Z" lastUpdateTime: "2026-09-08T10:07:28Z" message: Auto-approved CSR "csr-k5s2b" reason: AutoApproved status: "True" type: Approved