--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T14:56:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T14:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-04-21T14:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-21T14:56:25Z" name: csr-4s2cf resourceVersion: "6628" uid: f2535c41-4ad8-453b-90bd-cb92bdb29ac2 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c8028df428183433a33e4c82ce3eb19c073db95782cb2f7bf69eb556c7e417d5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-121.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-21T14:56:25Z" lastUpdateTime: "2026-04-21T14:56:25Z" message: Auto-approved CSR "csr-4s2cf" reason: AutoApproved status: "True" type: Approved