--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T17:52:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T17:52:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-11T17:52:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-11T17:52:17Z" name: csr-jcmct resourceVersion: "6701" uid: 4ed511e3-6af0-4085-955a-5682a8ae69b0 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=8f47f83346480d677ab64274751ee8b2bf010d9cd37f7b93a103bdfcff0fa2a4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-106.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T17:52:17Z" lastUpdateTime: "2026-09-11T17:52:17Z" message: Auto-approved CSR "csr-jcmct" reason: AutoApproved status: "True" type: Approved