--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T08:54:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-21T08:54:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T08:54:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T08:55:16Z" name: csr-5w2k8 resourceVersion: "7968" uid: a6351b24-4a61-4e07-a6aa-ac35a074b752 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=d0906a38ef222886fae3172d02e5d598900b5845e29d0299e8353d9aafa2a3d5 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkNEQ0Jyd0lCQURCTk1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRNd01RWURWUVFERXlwegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRJNExURTFOaTVsWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxCmhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUXVFNnBQeHJUaDlrR2JneXdDMkRabUxsWUtEQ0UvMmtraWNtVXkKdTZZZ1U2SFZlUkRNMjVoUCsyMHpvRmdmd2lpR1NVNFJKN0RTKzRDNUxEUjJzQm12b0FBd0NnWUlLb1pJemowRQpBd0lEU0FBd1JRSWhBTUEwaCtMSTE1VlRMbFRyd1F4Qms5emdaWGZKblNqNHg0bWhOeUUrRUgrakFpQUJkVTQzCkVJZWlvN0R4d2dtRE9GSUZCV3BKRXNUdng3RnRrbTdyLzFTUTZRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-156.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T08:54:59Z" lastUpdateTime: "2026-07-21T08:54:59Z" message: Auto-approved CSR "csr-5w2k8" reason: AutoApproved status: "True" type: Approved