--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T14:35:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-09-16T14:35:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-16T14:35:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T14:36:14Z" name: csr-fd7cd resourceVersion: "8030" uid: cd5681a9-e4a5-46b8-ad0e-ad6bf7e344eb spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=11d08e59325fbe4d3c3875649e3fec7ff09ec437ae517dfd3fe5086289049fcf groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-128-123.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2ekNDQWFlZ0F3SUJBZ0lSQUtLTngzTUNZL2JCNTUvYVpvUHhGcmt3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTJNVFF6TVRFMFdoY05Nall3T1RFM01UUXpNVEUwV2pCTk1SWXdGQVlEVlFRS0V3MXplWE4wClpXMDZiWFZzZEhWek1UTXdNUVlEVlFRREV5cHplWE4wWlcwNmJYVnNkSFZ6T21sd0xURXdMVEF0TVRJNExURXkKTXk1bFl6SXVhVzUwWlhKdVlXd3dXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBUmJ3MjF2OERRMwptWUxncXVVMFZIRGd0dFNOR1BaNitMQ05IK3N1UTBnUW1wd05sVm5BSW5JNWtrcEhaODJmc0thdTRxaFFIR1JJCm5SbUFLUjd5ZkZQcG80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUhnREFUQmdOVkhTVUVEREFLQmdnckJnRUYKQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFPQU1QSit0YnJIMTdBZmd2NHFKMkNHeQpjYW1rMWlhRk5FakJySHlma3pwUFFKeStSS0pydEpocU54K0R3amNUdFRORUg5Rzk5YkF0d2phOCt5MUZSN1V3CkRRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFMREJzOHRMYVVKc01FTVdNQlhZVmhSRUtKK3dXT01EclBzYlo3bDEKV0ZBUUkzZGdRelJSa0Q2Z1AyZ0NNbkUzeDI0NGNZa3ZPa2ZHZHA5UERkTkc5cmxuWnhPZW5xOGI3TzdlSGVUNQo2TG1KZ2NiL0tLU28wMXBieW1TU0NDZUJubXJ5WVdPYjNXQStrWXJPajZmdGFIdFFVc2lSVmgyeHBuNHVFTzNZCjcvMlR2cm1JU3VXdm44Y3JHSng3dy9nWmJFTlU3ODdxT1VyQTMrQlRoMng0aWY3TW9mUEZ3dlN0RFRUTFRjU2QKWTV5QmxXbWlwRWF6SDNsYzQxRFU1bEI2dEV0VGFsS3NyWXlBVVpiTWlkR2lrYUlyekVLTGxtTXg4R2ZaWlBUQQpYTTJDN0E1N0k2Y2FwRFZ0akRGUlU4aDFWbWVjOERiNCtWUVJXeG1iUEptMU5wYz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-16T14:35:56Z" lastUpdateTime: "2026-09-16T14:35:56Z" message: Auto-approved CSR "csr-fd7cd" reason: AutoApproved status: "True" type: Approved