--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T15:39:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T15:39:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-17T15:39:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T15:39:39Z" name: csr-xvs7h resourceVersion: "6565" uid: 3594beee-b694-4b93-98b4-2cce08aacd57 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=cdab3fb3f82c348fa339f35489be88ee3eb89c35f52a2603fe52da5887837da2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-66.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T15:39:39Z" lastUpdateTime: "2026-09-17T15:39:39Z" message: Auto-approved CSR "csr-xvs7h" reason: AutoApproved status: "True" type: Approved