--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T09:14:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T09:14:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-15T09:14:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-15T09:14:48Z" name: csr-zjkf5 resourceVersion: "7735" uid: fd6c8984-e024-4ebf-9f68-7eff54650064 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c2e531ec4267b05f271877e34caba39ed7ce0d69df23c14dbdd1bceea5e07b07 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-141-235.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T09:14:48Z" lastUpdateTime: "2026-09-15T09:14:48Z" message: Auto-approved CSR "csr-zjkf5" reason: AutoApproved status: "True" type: Approved