--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T14:08:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T14:08:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-10T14:08:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-10T14:08:31Z" name: csr-pwxzl resourceVersion: "6377" uid: e36b0fea-9c4d-45b7-9442-460b61d67210 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=232d4166a71b5f90d8cdcdfb5fb6c639e5c1f6ff819de39b7090ded4259a94d8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-135-64.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T14:08:31Z" lastUpdateTime: "2026-07-10T14:08:31Z" message: Auto-approved CSR "csr-pwxzl" reason: AutoApproved status: "True" type: Approved