--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T08:54:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-21T08:54:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-21T08:54:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T08:55:01Z" name: csr-rbtkd resourceVersion: "7989" uid: a3053871-14e6-41a1-a117-ebc318cbc93b spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=f5484a8c6912ebc878665f15c80c9a250834f597e770ecdcf45342a6f0b5703d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-133-119.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T08:54:42Z" lastUpdateTime: "2026-07-21T08:54:42Z" message: Auto-approved CSR "csr-rbtkd" reason: AutoApproved status: "True" type: Approved