--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T16:03:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T16:03:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-04-16T16:03:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-16T16:03:29Z" name: csr-lzpxb resourceVersion: "6559" uid: c03894b8-9882-4e16-b077-1cc049826355 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=00860bdda1b98e9f8049df5b2cd8523be4ec35d3118598b56d5ec7a99a32686a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-150.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T16:03:29Z" lastUpdateTime: "2026-04-16T16:03:29Z" message: Auto-approved CSR "csr-lzpxb" reason: AutoApproved status: "True" type: Approved