--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:43:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:43:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-10T17:43:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T17:43:53Z" name: csr-tchzk resourceVersion: "6951" uid: 5c46e49e-5c73-4d60-83a4-532495a74be4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=159b59f3c7cbaa94b852f24ebd4cbbd485eb14748a45272d458a47132953a3da groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-131-165.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2akNDQWFhZ0F3SUJBZ0lRRWIvUUJUUVZkVW1tdmJnbytVU1BQVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXhOek00TlROYUZ3MHlOakE1TVRFeE56TTROVE5hTUUweEZqQVVCZ05WQkFvVERYTjVjM1JsCmJUcHRkV3gwZFhNeE16QXhCZ05WQkFNVEtuTjVjM1JsYlRwdGRXeDBkWE02YVhBdE1UQXRNQzB4TXpFdE1UWTEKTG1Wak1pNXBiblJsY201aGJEQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJOU1R3VzRwVHFKQgp1VEsxSVZsQ2Z1M1dDOVBTTUdKSTNOOVZxV2hPK1lDUUp5S3lSU2lvRktFYXJqZHUzdGNFTktDcTJTdGhvVlNVCjIyeC9pcHBQaDlDamdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnZUFNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUYKQndNQ01Bd0dBMVVkRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWt5elkwT0lmckxpcW9La2lBeUxhUDFYZwpTQXpVNFNNY0dyS3VzdjU1TGIxSE1hd3pUQlVFRk9iM1RjSmNWQVFJcXNveUl6d3RzMjFTamxNRWtmTHFjREFOCkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQUViSUE1RG1ldjFJYW1DVnJRYWszbVBERi9aS011REFhMmgzU0dFT1cKWDlESXVVRHVDUVpyTlByQWQ0dkNUNEJXODFOR1lMcmd5bk42RHBCQit5WlBsbVlzNGZUekVLamN0a2RNVnpFNQo0QnNuL0tSTjZybGtHQzVENzRCRHlUSVJ5MENETGhJWER6VlExems0anZOdHIvN3dxU0Uzbm8wckhJMU5mK0lBCkFTT3h0ZFFQYk53ODNUdzN2NElUVitCdWpPaElGVk4rYk03a2VmZG1TTnBza1pITzRMWlk2eHNOMURkbnBQTE8KWHlnTFlsWXFEalN1QnRKMmxQTCtNKzI0UEphbTVpcGRkWXZwUTBLek8vbmNKUDFSd1Urczh5aCtZbm4rbnc3dwpVOTgvd3J1TEU5R20yOExnYk9qMDJoVmQ2amVHTVFPcVlyaW9zS2orQU04eitRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-10T17:43:53Z" lastUpdateTime: "2026-09-10T17:43:53Z" message: Auto-approved CSR "csr-tchzk" reason: AutoApproved status: "True" type: Approved