--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T17:23:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T17:23:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-28T17:23:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-28T17:23:36Z" name: csr-2rt85 resourceVersion: "8234" uid: b13bd1e7-a035-4dfb-8296-a5d6632a8555 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=95d1efb82682424b8e28de30e35c3c36313e220eaed3c4333d08e1aaa51c9378 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-129-31.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2akNDQWFhZ0F3SUJBZ0lSQU1iYTNtM1Z0dVMxNnNxYlNETWROeEF3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STRNVGN4T0RNMldoY05Nall3TnpJNU1UY3hPRE0yV2pCTU1SWXdGQVlEVlFRS0V3MXplWE4wClpXMDZiWFZzZEhWek1USXdNQVlEVlFRREV5bHplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRJNUxUTXgKTG1Wak1pNXBiblJsY201aGJEQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJEWEgrcUs2cGJ2KwpJNk91ZG5RV2I0ZFlUdnRzN2VIS0FsaGZEL0RJeDRoSWRHUG9oVDdDa21McHNZb05xWFlRSjZ0K2lJZTBFR0R4Ckx1aGxDbmgveTFPamdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnZUFNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUYKQndNQ01Bd0dBMVVkRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQTNRSmVkNnVkaSthT2pGL0VZejU5Z3MwYQpiOEFPVmE5WWlZRmR2Zi9tQnl6SjltZklaS2hPNklXa3IrYm9RanNZbkR2K3BMTUhVeW9ZNnhhakxHMjlVekFOCkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQTBVbnNqL3FYZ0dvOVVIS0JwNHlaZ3JDTDVTWWdzMldEZFFTOHYwMEcKbTBsbGNEWm50aTk1Z21JOVYybHkxUEZWY2F0WkgvUlZ6cGxkd0U4V1Ywak05YTM2NW12S0hkelVTbWhsQ0I3KwpLaC9Rc1g0MDRuajZWdUR6T216bUUxOGpHTnFTTHBUR2Qra1lqLythUmNaQmpYcE56L3dmY3c1Qy9tM0s5UnlxCnlRNHNLV2w5UElZL3AxZDhIUVVRWjAwQjJlUzVPbkt0YWtNWHdaWnRWNUdCWUhxR01CcklRd3oxMk1OSUJjdjMKUzdFa2pCOVNCTjhxQnZYM0UrbUgrc0VzMnQvRWpmNmVacVlmcStoN1JOVnk4Yy9ZaEt5U29wZ3V0RTRqOHdqcwo3TXFTSW9OWjlhdHVRWDREbFZhY0dVQ2d3ZlhDMk1UV2RCTGVZK0dIMEVha253PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-28T17:23:36Z" lastUpdateTime: "2026-07-28T17:23:36Z" message: Auto-approved CSR "csr-2rt85" reason: AutoApproved status: "True" type: Approved