--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T19:11:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T19:11:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-14T19:11:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-14T19:11:19Z" name: csr-xzst4 resourceVersion: "7016" uid: 1ffe9e19-7214-47cc-adfc-878cf5ab5e4c spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=668679611d7966dc787a9465e93ac90073243b8354db8c30ebcb15d4e190ee26 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-70.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T19:11:19Z" lastUpdateTime: "2026-07-14T19:11:19Z" message: Auto-approved CSR "csr-xzst4" reason: AutoApproved status: "True" type: Approved