--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T15:56:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T15:56:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-17T15:56:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-17T15:56:51Z" name: csr-cssn7 resourceVersion: "6364" uid: 063ede07-32ee-4af9-9375-e384f35f772f spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c961bc1bdcc8e6ac72e9d07f4744ced6976e81a21890c7494256552e936c3c48 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkNUQ0Jyd0lCQURCTk1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRNd01RWURWUVFERXlwegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRJNExUSXlNaTVsWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxCmhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU1JhcHlXcW5NZmpBaG1aMlQ2MkRjVytneHNER1orUmZVMnI2TjAKOTFlYlU1em9aaVJWR3RiQ0w3RS9UQ3E1eXNFYm5GWWo1MkZsd0kvUmdsQ1hVT0tGb0FBd0NnWUlLb1pJemowRQpBd0lEU1FBd1JnSWhBS0dnOXh3clQxeUdWbGw1QU5SRk9aOW13NDlwL0lTWjh2Q3BXZVVpRS9TakFpRUFxQmt3CldDbjQvR0FoYjhuTnlHL21QUkxTMVNnSEpYSDU1dWp3MTFjM0o0cz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-222.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2akNDQWFhZ0F3SUJBZ0lRYVAzMDV5S2lCVjVLdGVPaW9hSS9GakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UY3hOVFV4TlRGYUZ3MHlOakE1TVRneE5UVXhOVEZhTUUweEZqQVVCZ05WQkFvVERYTjVjM1JsCmJUcHRkV3gwZFhNeE16QXhCZ05WQkFNVEtuTjVjM1JsYlRwdGRXeDBkWE02YVhBdE1UQXRNQzB4TWpndE1qSXkKTG1Wak1pNXBiblJsY201aGJEQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJKRnFuSmFxY3grTQpDR1puWlByWU54YjZER3dNWm41RjlUYXZvM1QzVjV0VG5PaG1KRlVhMXNJdnNUOU1Lcm5Ld1J1Y1ZpUG5ZV1hBCmo5R0NVSmRRNG9XamdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnZUFNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUYKQndNQ01Bd0dBMVVkRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQUFTZk5qRUtOL1Z2a2tIS0tOdnlNTk9VRApneHRmZ1RrQkovVG9wQkNDQVYwQkJ6b09vejFMSTBndjM3M2hZa3JWUDlvOHhTbnNyMkIxMjhJOWV4UlpuREFOCkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQVR5M0FBSE51bjNZSE9uN1JSTXlISlc2TzhlL2drK0V2M2RLOEhLMWQKYlFFYmxsOXZLbkE4bll5eDlHVGpNeS9jaDlQQVB6QVRPdW0xL0EyUEdiWkVLTWxPRlBJa2tkSmZEQmdQNG0ydwppc2FXdnN0azQvRC95UWVRNUlNTVNYM1k0bENucndNOTRXZUcvNEh6a2hrWXpHdEt4OXZGVkZwQ1liQkQxS0dmClczd1QrRUFqR056MTNkd3l5NFFUcTZOY3NOSStDb2hnUFNtR0FlM1pkckFyWURaQXZ3M2pBZktlUXZOZy85M00KeEhEVSsyR1dwYjEvVHgvUjZ2Yk9tU1llc1E0NFJTRC9RRk1OODhNTUY4blJZazNLNEl2TmMvN28vdFZhcDM1eQpPU1NDMmtpZFpUOHVBc1RUNnR4eHA1dVFIdmNIazJNMlFOeWdhdE8wcm4wa1NBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-17T15:56:51Z" lastUpdateTime: "2026-09-17T15:56:51Z" message: Auto-approved CSR "csr-cssn7" reason: AutoApproved status: "True" type: Approved