--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T02:30:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T02:30:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-09T02:30:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-09T02:30:45Z" name: csr-64d9d resourceVersion: "7041" uid: 9d061628-cf80-4734-bdbd-354d533e46fe spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=9638214b179f462276772b4f98a748b268e8e3390d32f1aa09289eda2b9e3cf2 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJ6Q0JyZ0lCQURCTU1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRJd01BWURWUVFERXlsegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRNM0xUTTNMbVZqTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHClNNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJJWVF3a25HMXVpRWZRbGhHNmlLei9zd04yK0Z2djZXZ2craWhFNWMKUXZScW84VEdTeXR1elNYbUVFbkNUcGNEZVJiSnB1eVY2cEdqSkM5SXd5SldzdmlnQURBS0JnZ3Foa2pPUFFRRApBZ05JQURCRkFpRUEyU3I1WElFWDJzamFmQmRQai9nUG9JcUxSczNLSnRkbGVNUW9XWFVLRGdRQ0lBMU1wV3VECkR3MTM3STRFV0xVNWdmUTdEYVRWcXZSV2ZxVjNZZVpHVFU4SgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-37.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T02:30:45Z" lastUpdateTime: "2026-09-09T02:30:45Z" message: Auto-approved CSR "csr-64d9d" reason: AutoApproved status: "True" type: Approved