--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T11:42:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T11:42:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-04-20T11:42:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-20T11:42:24Z" name: csr-xpphh resourceVersion: "6330" uid: d46c2b88-ada4-4720-a3ff-6ce21d2b909d spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2ae94afaef868442ca53ba8748813ec8c87ec043023113f0d2bb7d412ca64cb9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-125.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T11:42:24Z" lastUpdateTime: "2026-04-20T11:42:24Z" message: Auto-approved CSR "csr-xpphh" reason: AutoApproved status: "True" type: Approved