--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T13:45:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T13:45:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-17T13:45:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-17T13:45:46Z" name: csr-2p7xs resourceVersion: "6955" uid: a89b6f75-1910-4dfd-a027-f784df0d12a0 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=63e489bd0aa2b12bd43b81343ebea952478b892b0d4d4df6314e8f43976cdfed groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJ6Q0Jyd0lCQURCTk1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRNd01RWURWUVFERXlwegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRNekxURXlNeTVsWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxCmhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVFVBbFY1WUxUWFlXbWVUYUszSU8xenl0VGpMOGFaZVBnbUVWNjYKUWdiWkQ3ejJIWUp4eUp4TCtvZnFaaWxpaDNzRDhKdjV5MzNPUmlqcW1ON1RTK2hMb0FBd0NnWUlLb1pJemowRQpBd0lEUndBd1JBSWdlR0ViY3VlbEtrRk94ZTRXeU1aa2ZXdXRSUnlCcm9XVUswQUhndklxRm9NQ0lGRDFQbWUxClVqNDV0VFYxdDdhS0pleDdTa2JiTGZVTUsvTmlCQUlqYUxHbwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T13:45:46Z" lastUpdateTime: "2026-07-17T13:45:46Z" message: Auto-approved CSR "csr-2p7xs" reason: AutoApproved status: "True" type: Approved