--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T14:11:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-07T14:11:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-07T14:11:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T14:11:46Z" name: csr-rk2j8 resourceVersion: "7968" uid: 0e4d508b-5c79-43e0-9e5a-8f0615c4f540 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=e4a7ecdcdac52c44a8bddb1cf2207fd89dcdcdcdbe8d285350eadcb7987b7066 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-143-6.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T14:11:29Z" lastUpdateTime: "2026-09-07T14:11:29Z" message: Auto-approved CSR "csr-rk2j8" reason: AutoApproved status: "True" type: Approved