--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T10:29:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T10:29:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-29T10:29:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-29T10:29:33Z" name: csr-nzb6q resourceVersion: "7282" uid: 9a59983e-3771-470b-ae35-e9a83fbd58f9 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=2d43825ef2fbbab3bef7b48fd90a8733c3151180d64f8d2645f327674a2dd7b8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-43.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T10:29:33Z" lastUpdateTime: "2026-07-29T10:29:33Z" message: Auto-approved CSR "csr-nzb6q" reason: AutoApproved status: "True" type: Approved