--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T15:35:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T15:35:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-04-21T15:35:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-21T15:35:56Z" name: csr-s2khs resourceVersion: "6689" uid: cc6a7c11-a5ea-4e1d-8bc5-7ccf1aae93eb spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=1e8bc094147cb04f1aa88b7b5ef756d633cb3ee6e4032eeb94eda32753efb374 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkNEQ0Jyd0lCQURCTk1SWXdGQVlEVlFRS0V3MXplWE4wWlcwNmJYVnNkSFZ6TVRNd01RWURWUVFERXlwegplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRJNExUSXpNaTVsWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxCmhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVFE5cTZWdFZuU1lWbkpZSzROUkswb1R3cE5LMDdiVGJQcnArd0QKa3BrT2ZNMzBWRnZ3cS9sUnF1OXRROVgyMm9XSW5HYmxNaXIrOFhvQWw5V09VS2ltb0FBd0NnWUlLb1pJemowRQpBd0lEU0FBd1JRSWhBSkIvN0hkVXZBd0p6Y3pwWVQ4LzQrTWZwTGlTNVh2VGhYck1CbkVFMWlpMkFpQVNPOXNDCkYvaXBNd0ZsUmZHczduMkhVVGE5cW5CYktlMlNHYjR1VmpPNG9nPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-232.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2ekNDQWFlZ0F3SUJBZ0lSQVBGTTNhM09GQlFWZG1Gb3ZXT2Jyd293RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESXhNVFV6TURVMldoY05Nall3TkRJeU1UVXpNRFUyV2pCTk1SWXdGQVlEVlFRS0V3MXplWE4wClpXMDZiWFZzZEhWek1UTXdNUVlEVlFRREV5cHplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRJNExUSXoKTWk1bFl6SXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVFE5cTZWdFZuUwpZVm5KWUs0TlJLMG9Ud3BOSzA3YlRiUHJwK3dEa3BrT2ZNMzBWRnZ3cS9sUnF1OXRROVgyMm9XSW5HYmxNaXIrCjhYb0FsOVdPVUtpbW80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUhnREFUQmdOVkhTVUVEREFLQmdnckJnRUYKQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFFak9uUm1XWVB1Q0FSUUVmWURsaDNyVApHcDdqdEhYbW5oMk0wRnVnWUhrbHIvK1l1a1B0ekNQSndhWktxVHd6NmhEMEJLUVE3eWM0S0pHNVZCV2Y0QU13CkRRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFNZnErYWp1clRGVXRXcDdoMWJNV3I5ZTlWS0JCZ3NqcEJDR2s3eTgKN3MyeXVnNGdmMS9FNzhXaUVXUHZQbFVZZUJGUnFlUm9JWDRzOEE4V3RhbmFETjJ4K2tGQXczUEUzbXlaRGNpRAp0LzBrK3FsdFpFUG9BTWZxY1NCWTFoc3FJdFZrRkJOdkgxUHc1Z2xUQ3QxaW8wRjFEYkF5dmNEWGVEVmdwZTF1CmJMRnpmYWM4Rm43b1VTZjVzSHUvLzFTeU4xeXNleEZzUEJUSS9xZzJjckNxUUFINy9mQVZoMUwxRmlJSFkrTjUKS2R0b1E4VUJTRTUwTUJsajNuRml2UEFXMktEMEN0bjlxbm9TR3VlWjVQMXgwRVIxcysxank2RCtjMEIrZkNhYgpsN3ByVHFBc0VlcUdUalhvNmVidkxFb00vMWJOYTY1SzZPOWxnaFFYV3NqS284Yz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-21T15:35:56Z" lastUpdateTime: "2026-04-21T15:35:56Z" message: Auto-approved CSR "csr-s2khs" reason: AutoApproved status: "True" type: Approved