--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T18:36:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-11-03T18:36:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-11-03T18:36:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T18:36:37Z" name: csr-2wtfm resourceVersion: "6893" uid: a9d24b86-5e41-455c-99f6-541549773818 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=5e3eeebb7cca79a81bb67e8c2d638b93362e7bfd22f301230498682750ada6e8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-211.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T18:36:22Z" lastUpdateTime: "2026-11-03T18:36:22Z" message: Auto-approved CSR "csr-2wtfm" reason: AutoApproved status: "True" type: Approved