--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T20:57:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T20:57:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-10T20:57:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T20:57:29Z" name: csr-tqkmb resourceVersion: "7072" uid: d5296b10-66a3-4e44-b6e7-1d1f30f8b5f5 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=4a0b48c84cfac1d59ede85927f1d3457ef6856091ae42f194927b9d022407140 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-232.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T20:57:29Z" lastUpdateTime: "2026-09-10T20:57:29Z" message: Auto-approved CSR "csr-tqkmb" reason: AutoApproved status: "True" type: Approved