--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T15:35:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T15:35:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-04-21T15:35:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-21T15:35:36Z" name: csr-spz7j resourceVersion: "6149" uid: bbc5f687-841a-4a41-b643-56b57cd5c6a9 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=55fdcb3874a115b7b8a4fd660b9c07ebb7fe46627b84cb995d6e8f8ca832910f groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkNUQ0Jyd0lCQURCTk1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRNd01RWURWUVFERXlwegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRNMkxURXlNeTVsWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxCmhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUVN3eWhPL3h1RElHR3ZzQjVtRi9wVDVxcjluRlNNVG1qVGxYQjgKcHVSNHJtd2pJWkFmRzFvNUdxZnpsaGhXTzRyV2hVV1RZOE9Vcys5RWMyQUVZMHZlb0FBd0NnWUlLb1pJemowRQpBd0lEU1FBd1JnSWhBUGNGdEJrMVU4S2xHaGRxb050OEIrazB5NUt6ZVdqZmIyZmpzV3JjOFhabUFpRUF0TnR2CnVXWUJTZ1hFYUtQQkdubXAzbTRNcjhXclRQSlpPeWo4R2ZXRGE1QT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-21T15:35:36Z" lastUpdateTime: "2026-04-21T15:35:36Z" message: Auto-approved CSR "csr-spz7j" reason: AutoApproved status: "True" type: Approved