--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T17:15:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T17:15:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-18T17:15:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-18T17:15:01Z" name: csr-h9bs2 resourceVersion: "6441" uid: ec3148de-716e-485a-acb8-a67a87d408bf spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d90ff5ae2213c5208ed51376102d80b250240e768ed154acef92ca2e5d795ba4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-187.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T17:15:01Z" lastUpdateTime: "2026-09-18T17:15:01Z" message: Auto-approved CSR "csr-h9bs2" reason: AutoApproved status: "True" type: Approved