--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T11:38:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T11:38:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-14T11:38:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-14T11:38:23Z" name: csr-kfd44 resourceVersion: "6907" uid: 425f0a1a-c808-4576-a225-e83588a61cd8 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=1fcda26c15a0c3921d1ca5defe688c68572cd9ad661b05d8fdcbea582c01c7aa groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-136-205.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T11:38:23Z" lastUpdateTime: "2026-07-14T11:38:23Z" message: Auto-approved CSR "csr-kfd44" reason: AutoApproved status: "True" type: Approved