--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T16:17:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T16:17:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-11T16:17:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-11T16:17:18Z" name: csr-xkrrt resourceVersion: "6649" uid: 0fd0761b-6e58-43ec-8367-cfce8f903371 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=6c6662f30e218e5fc808d51fc14af44bf0e6ad6880e9cfb0d6182ceb7282cff8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-197.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T16:17:18Z" lastUpdateTime: "2026-09-11T16:17:18Z" message: Auto-approved CSR "csr-xkrrt" reason: AutoApproved status: "True" type: Approved