--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-03T09:43:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-03T09:43:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-03T09:43:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-03T09:43:52Z" name: csr-x2ksz resourceVersion: "7058" uid: c3c94af4-fb1a-4379-91f4-fc4e07e232d0 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=325dde9b77febf6e191d4ad0994e9b9458ea27a379ce27df4741085688bf9c58 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-129.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-03T09:43:52Z" lastUpdateTime: "2026-07-03T09:43:52Z" message: Auto-approved CSR "csr-x2ksz" reason: AutoApproved status: "True" type: Approved