--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T18:06:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T18:06:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-01T18:06:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-01T18:06:02Z" name: csr-tf9zm resourceVersion: "6907" uid: cced2f93-b1c8-4714-898e-def59b6989f4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=b37fd21af79c47e165683faaabaa7285eec6fe532d578023226ba09f067c1756 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-248.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T18:06:02Z" lastUpdateTime: "2026-07-01T18:06:02Z" message: Auto-approved CSR "csr-tf9zm" reason: AutoApproved status: "True" type: Approved