--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T20:12:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T20:12:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T20:12:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T20:12:57Z" name: csr-qpckq resourceVersion: "5854" uid: e653e637-a502-4347-b022-3b93450a0be1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fb5b0e1491a22ca6ec3cfe56efb5948d5ea59b2807702930369774b69ce7695c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-173.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRTGcvMTIwU0k3YXNtVXBLa2E1NUlIekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UZ3lNREEzTlRkYUZ3MHlPREE1TVRjeU1EQTNOVGRhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemN0TVRjekxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkZTaHlseVR5OFRmSDMwYgpVcitGYmg5N1lHaS9FWkE0OCtmNlk2R1VyeURibU8vVExwSWR3QlRzZDdoNmQ5OHhNR3Zqb3lBMndZZ0sxUmVsCnNlY2V6N0dqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBaVg2NjNHREl5YVhMWlQ2UWI4OWk0SFBFaHlMNwpLUC81REpqQWRCRGI1VHdRbHNIYUE0U0FPQjcrYnN4RHZkYk4rRWk1TkhPL1pBbkFKdFdFNjlYNVVUQXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFek55MHhOek11WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSW10TUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQlNyYUhibW0xc0xzQWp6a1orQStsWUhSZ0VnZDVONDlHenlOYmY0NHptSFpNUwpock1tb2EwZFIzS3lQVW5hR0VCb2ZuWXJJTSs4ajRXWjFrK1cvZ2ltOE5yanI0UjZRV2tsUnAyN0tzUFl3RlowCjR5VERuekp5dXZOaGtiL2kzYkN5QnlqSUd5bjg5RWUzTERqUUdTMm5MUVo5NFRNR2NpZVIzQ0JHSHFTWmUrK2wKOCtoMDJOdjBXQW53eWxraG1YTjJ5K0xLdVgxWHIvMnZrNTZIcDcwZXpQd0ZBeXdOOEM1K3VXRUlhTjNmSlRzdApRMmtJSlQ5UUVtYWVHVGJNSVJ3N2NLbXhDdjRlSnR3RnNxd2RoMGlCSzVja3VaYUZuQ2VxaXovaC8vcVAvZE1LClpqSGpmWklnUTVrbTNSTlpPQytVT1REdmNPUFY0bmxCUVRoQ2JmTmQKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-18T20:12:57Z" lastUpdateTime: "2026-09-18T20:12:57Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved