--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:12:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:12:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-02T19:12:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T19:12:17Z" name: csr-crfhb resourceVersion: "7196" uid: e02fbf4e-591c-4035-805a-6374556d1344 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=33046c980ee76704a683332b3e026723ceadd03ccad934eb95cabcfe7959a737 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-38.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T19:12:17Z" lastUpdateTime: "2026-07-02T19:12:17Z" message: Auto-approved CSR "csr-crfhb" reason: AutoApproved status: "True" type: Approved