--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T16:46:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T16:46:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-07-20T16:46:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-07-20T16:46:25Z" name: csr-mx7hr resourceVersion: "8224" uid: 433c7e11-be71-4091-9cf0-70e4eb5923b4 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=c8ef4234552b1d7356870a911d7ebceba74e1a82767e059dcba45f652bde3cea groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-130-18.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2akNDQWFhZ0F3SUJBZ0lSQVBwMG83MFpYQi9hVFZpSWRFZTdmRTR3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056SXdNVFkwTVRJMVdoY05Nall3TnpJeE1UWTBNVEkxV2pCTU1SWXdGQVlEVlFRS0V3MXplWE4wClpXMDZiWFZzZEhWek1USXdNQVlEVlFRREV5bHplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRNd0xURTQKTG1Wak1pNXBiblJsY201aGJEQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJIU2lIS1k2OTluZApEd0JLSUtKa055TEV6Tk12ek9ZMVAzczI2THJpUWRxMWJISm5tSkFTdkl3Zk53SWlXa2x5Zm80bVNwVUdLUWlZCngva3ZFcUtKRFhlamdZTXdnWUF3RGdZRFZSMFBBUUgvQkFRREFnZUFNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUYKQndNQ01Bd0dBMVVkRXdFQi93UUNNQUF3U3dZRFZSMGpCRVF3UW9CQWxHTXY0bVRhdXcxbWRNUnQzYmN3dHdweQpTVGx0YUp1dklrbkltMFUzU2FDVHYrYnJIZGVOMGNyU1JYOGhrQ1VHTnptNUp3eUF2Z3laKzVQY1RRTFRnekFOCkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQVl0WkpNdmgrZFVadWtobi83YzhzVWRqMmFVQ0pWUXlWTFFxK2U4MU8KaThqUmM3UkxrbVFJMGxjakZpMStSQlIxMFl6Sm1hOFNldkpkdGFWQlhVUEZZd0luYUo2VHNoV0dacisxNmRuYQpXZ1VhOVJ4by9jcHhDZnJ6U3FFVzZnMWVYQmh2ZklwdnlnSEh3UFhCay8ycWljbWc4eG5jdWEzcWVXSEVxLytPCmlxbndUT1QwWHNuazBaUlRoYnQ5bUx3UWplNFB4Z3BEdlpWWjZYY3U4dS9YNXpaUDZPd2lDbG1PaEhRaWdSKy8KRFJncWZ5MVlyb0JQVzJnd29KbU5uZHdlY3NJSUlydE9zdU4zd1lBeUh6VE1aZlY2aUdTY2grRUhHL3ZLUjNobApxMnNTV3M4MUxiNU1Sc1c4dmRDd1ZDcFY0OTM3SzVzc09MMHp4YnNpWUo5N0ZBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-20T16:46:25Z" lastUpdateTime: "2026-07-20T16:46:25Z" message: Auto-approved CSR "csr-mx7hr" reason: AutoApproved status: "True" type: Approved