--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-27T17:04:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-27T17:04:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-05-27T17:04:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-27T17:04:45Z" name: csr-2lctf resourceVersion: "6843" uid: 6adb3593-0e9d-4ae8-97e7-72504f2b9207 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c2a77493c9dcf18f5fd89a66812829613ac10deb11356b9c23aabf589dac56de groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkNEQ0Jyd0lCQURCTk1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRNd01RWURWUVFERXlwegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRJNExUSXlNUzVsWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxCmhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVGNqbEVkaGw0Q2NMdUlGOXZOaUlLMGtxSlNlMWx4cXFkeDdjelgKUHhDT09WbjRxNXRza0dSZmY3ZjkxM3hodmtTa0dPdHdNeDJWR0x4OUZubW9tN1V5b0FBd0NnWUlLb1pJemowRQpBd0lEU0FBd1JRSWhBTXBoVW1FRVU4UjJFOWxhN1RwdVoxV3NKYUEvakdHRlhEc1lRTnBDWlJuRkFpQWxCZE0vCnBGd0drTGNORE1BdVo4OWJlRlZpRlBuTE80ZzlGU0xER0l2aVl3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-221.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-27T17:04:45Z" lastUpdateTime: "2026-05-27T17:04:45Z" message: Auto-approved CSR "csr-2lctf" reason: AutoApproved status: "True" type: Approved