--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T19:38:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T19:38:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-14T19:38:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-14T19:38:30Z" name: csr-dnsqd resourceVersion: "7043" uid: 34043269-ac7c-4d85-8ee3-2ad9578cc980 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=48e18385ac0e67a99cdde4bb40546fdb9be158915f722a44648715a076938de9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-126.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T19:38:30Z" lastUpdateTime: "2026-07-14T19:38:30Z" message: Auto-approved CSR "csr-dnsqd" reason: AutoApproved status: "True" type: Approved