--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T16:50:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-28T16:50:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-28T16:50:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T16:51:03Z" name: csr-lh9lc resourceVersion: "7926" uid: ba0bc513-f252-4a38-8180-ffa643280d04 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=8728dc2d62c6a4654b4b28f06948694ee7f9455b8132af1709ddbb0141e1b15a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-92.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T16:50:44Z" lastUpdateTime: "2026-07-28T16:50:44Z" message: Auto-approved CSR "csr-lh9lc" reason: AutoApproved status: "True" type: Approved