--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T15:36:06Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T15:36:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-04-21T15:36:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-04-21T15:36:06Z" name: csr-xzkq2 resourceVersion: "6862" uid: c5a6b20d-1e23-43fd-8e80-299bc1d84e20 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=57bd3ec991178dce6ea3d9cd264d5dc9a6a662aebdf2de05f356abf59f39f0c9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-132-141.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2ekNDQWFlZ0F3SUJBZ0lSQU12ZVI1TGJXRU5RMTk4aDRzK1dKZE13RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESXhNVFV6TVRBMldoY05Nall3TkRJeU1UVXpNVEEyV2pCTk1SWXdGQVlEVlFRS0V3MXplWE4wClpXMDZiWFZzZEhWek1UTXdNUVlEVlFRREV5cHplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRNeUxURTAKTVM1bFl6SXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUVg1Vk13RHkwRwoxSnlIU0psU3QvOStiQ0lzRnBXWmFJNzBDemdsbzFVY082aTZUQ0kvQ0ZzS3RHSmJBN2tCRmtKcWVycjVoT3cxCmQ1SXUwc2xKMTI4TW80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUhnREFUQmdOVkhTVUVEREFLQmdnckJnRUYKQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFFak9uUm1XWVB1Q0FSUUVmWURsaDNyVApHcDdqdEhYbW5oMk0wRnVnWUhrbHIvK1l1a1B0ekNQSndhWktxVHd6NmhEMEJLUVE3eWM0S0pHNVZCV2Y0QU13CkRRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFIRlVvWnJEaG11RUc3NUZheDBRdkEra3hYK21qbXlnbmlUWDlQNnMKRGtLREl6QXU4OHRiMnE2SUs2K05ESWxoRGZXWk0yU0krc2J3dmh0ZnFzWVlIeG5lYkkxbjJDa3RWTkJJdmtBbQpYcEFFVTdrSG5BZDBSZ0g5R0x4K2hmRXl6WUIwSUxpZXlUcHpEZUthRStMVG5oRVVjVEhwajJjcDIzc3I3RlFSCkpYT3l1Q1YwcHhiQkR0VU5rQUZ6UnhnYVNoU3ZXVm1DejdwS3JnaVVRU1VEdG1TcU1FcUYxTGI3N3pKYjBCdmwKQmFINzdKTVYxRVBNbm1JRyswcTFPbHVKK09vMlA5UHFDS2pEMTRQaHFKLytBeDhaNVN3VXdXM0ZteWhFNVBPMQpwZnJDMlJmTUVVUnNyeTE3UnlrSDAzNEhmdVpLUnlEWnpCVExDZWFwSmM2UTdmTT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-21T15:36:06Z" lastUpdateTime: "2026-04-21T15:36:06Z" message: Auto-approved CSR "csr-xzkq2" reason: AutoApproved status: "True" type: Approved