--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T17:28:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T17:28:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-27T17:28:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-27T17:28:36Z" name: csr-kdxcz resourceVersion: "6936" uid: d025866e-fff2-498a-8d25-3d31bda76b18 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e32046e23e06a8712875461a37586a2e48c09bc5319178b719117a2f6d0fd6e2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-71.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T17:28:36Z" lastUpdateTime: "2026-07-27T17:28:36Z" message: Auto-approved CSR "csr-kdxcz" reason: AutoApproved status: "True" type: Approved