--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T19:58:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T19:58:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-04-22T19:58:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-22T19:58:04Z" name: csr-bhclb resourceVersion: "5921" uid: 016e138d-3241-48d1-b39f-66a9ec8fa0ca spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c1bb7e78c3607ddbb7c84acbf7da7ba8276e7961cb3de74d4779299129a947a0 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJ6Q0JyZ0lCQURCTU1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRJd01BWURWUVFERXlsegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRNNUxURXdMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHClNNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJCVDNMMGorK3pTTXBIMW9PUEdSSTUvajY3Z1dzTmE1aEFVSCs1VUEKMk1saUVwTlBhZ1RRSUZ6YzU3MENhMlNybjVqOThFQWYvYXBQT2dsR3ZBYkpLcHVnQURBS0JnZ3Foa2pPUFFRRApBZ05JQURCRkFpRUE5dDhiaEtTRldJUmJPM0taNU1Ed1l2c3hNSUNBaDNxV1orV3VQdE5sSmIwQ0lEMkNkMEs5CmIrVU5FQ3MzSVJDUXYrWXZPK0JFa1FtQyt0Qm9XbFlpbitqbgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-10.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T19:58:04Z" lastUpdateTime: "2026-04-22T19:58:04Z" message: Auto-approved CSR "csr-bhclb" reason: AutoApproved status: "True" type: Approved