--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T21:58:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T21:58:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-06-08T21:58:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-06-08T21:58:02Z" name: csr-rkrfj resourceVersion: "7087" uid: 6a07a635-6178-4e38-bf15-9f3173c6a729 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=20f7680adc3213517fd8bc4dbdc2d1310d21ff27a7c17bb4beba4f5f185be654 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-138-88.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T21:58:02Z" lastUpdateTime: "2026-06-08T21:58:02Z" message: Auto-approved CSR "csr-rkrfj" reason: AutoApproved status: "True" type: Approved