--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T11:38:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T11:38:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-02T11:38:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-02T11:38:28Z" name: csr-dgl67 resourceVersion: "8248" uid: 2084d03a-5c04-47cb-a9d5-82771445018d spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=ef34e9c8280c31f323e381c79397d74580dcab87c048fbc7a891123efa7b82e8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-228.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T11:38:28Z" lastUpdateTime: "2026-07-02T11:38:28Z" message: Auto-approved CSR "csr-dgl67" reason: AutoApproved status: "True" type: Approved