--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T11:16:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T11:16:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-04-17T11:16:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-17T11:16:42Z" name: csr-ql2tk resourceVersion: "6165" uid: f53b8923-37d7-4347-ad14-1e9364729395 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=1934b5910ce84fc10dcdbc68616a8483f8df420f47cc50e797120c4507d6e046 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-81.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T11:16:42Z" lastUpdateTime: "2026-04-17T11:16:42Z" message: Auto-approved CSR "csr-ql2tk" reason: AutoApproved status: "True" type: Approved