--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T16:06:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T16:06:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T16:06:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T16:06:46Z" name: csr-gj8hk resourceVersion: "6777" uid: 869543e2-5a4d-48fc-bd75-a44e6c684132 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8ff65abc7107a0369d877c9dacc07c843478f77d304b62444a4c630596b2c82e groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJUQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRJeE1pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTL3JlQUtZZ1ZmSHZJVE5Qa0s4SXpSUTNKZERZdGh2ejY3aG5FSWRqQnIKWkZIL3Nsbm5Va2JER3BlbXZFcUlueFhrWVVVeHdwVnlBNWkwdzBuTkNNU2ZvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXlPUzB5TVRJdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJSFVNQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJRnRyNzl6SkdIUVZiODk5NDNJMW8rcEx2aVlPVGlvdlRjcnQKaG4wRGh6VTZBaUVBb3ZnUW91OXlhVldIL3dwV2JUNXlmck1HM29WYi9aSE03bGhMVFZDYzkvaz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-212.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRQzllZnZlTUxxVXBwdFBSUllzS1BtREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qa3hOakF4TkRaYUZ3MHlPREEzTWpneE5qQXhORFphTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNamt0TWpFeUxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkwrdDRBcGlCVjhlOGhNMAorUXJ3ak5GRGNsME5pMkcvUHJ1R2NRaDJNR3RrVWYreVdlZFNSc01hbDZhOFNvaWZGZVJoUlRIQ2xYSURtTFREClNjMEl4SitqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBMTJwYlNQTVF2SVdWcFNjeVVmVWdLak51MFhCMApQczlWa1dPQXYrUHB4QUgwUWR4VVhhMnFDNlVOSlE5UEJDVUxGY3FtT2ZnOThnNGk0MCsxcUp4em96QXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFeU9TMHlNVEl1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSUhVTUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQWhxaWk5OHVEdUo1RkkzS1lpZWxoeDZKRHl3UThodm50a2dtcVpabk9VRGhjaAo5WUlpR3o4amFPQ0ErdWt2cDF1ai9mKzdTMjlCRE91N3dhS0RhL25scEk2aStoZ1R0SjdENUZML3ptNG5zMFQxCjFEVEc3dnI3TEFTd2FSb1RWek1UNUptaVFscVlxUXpLRGdRdkNZeHQ1NFNXazJwanJwMi9rU1pUWmR2ZFhJNW8KWHJES0k5VGR1ZFp4NmFCc1cxVzlERTZLSU9Ba3liSVpDcUpCTFF2ZUJ5MWVpRnd5aHJEK3JYZkZnOE9KQWQ5Lwo1ZDFPMkExUUJDVVozbEZUdHY2ZmFVYVJSVDNDd3dXSlgvM2c3azBCU3FnVEUzTFNIYkh2MHFQNHVXNm9ucVo2ClM1LzJSQkdEdzlueTMycmlJdmRvRTBtbTRNTGVMK3FEcFdMaU9EVTMKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-29T16:06:46Z" lastUpdateTime: "2026-07-29T16:06:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved