--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T15:39:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T15:39:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T15:39:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T15:39:55Z" name: csr-zklg8 resourceVersion: "6376" uid: e320d77c-7b70-4f2b-ba9d-ce7f0d78b096 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5b221c51ee7a88bbc3370a8cae955bbdd060d16e033e4fad97d916c8709ec4be groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-4.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM1ekNDQWMrZ0F3SUJBZ0lSQU1kVmZNME5pWDRvSUMzRWJvVWRLL2d3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QXlNVFV6TkRVMVdoY05Namd3TnpBeE1UVXpORFUxV2pCSU1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeEx6QXRCZ05WQkFNVEpuTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRRdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFMDU0SmFnakh6SnlXZTdVQwprRGxSRkw4dkRoMTZLYWJnckFSKzFRaFMwc0d5Q01FaFZwL0pNeVBJbHFvYlVza3dwNXNJOWNuSU5CTlRVUW1kCkQ1dXdJYU9Cc0RDQnJUQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUEyTi84WDdvSUxtcjA3eTVIZjRZOW04d1AvSk1YcAprRFFYNDlYZXEwRzc5ZXVZSVBUK2N4ak93SWpyVzA4YldTVVFWMkhIOWRRY3RVRXBuY3cyZkpzMk1Dc0dBMVVkCkVRUWtNQ0tDR21sd0xURXdMVEF0TVRNd0xUUXVaV015TG1sdWRHVnlibUZzaHdRS0FJSUVNQTBHQ1NxR1NJYjMKRFFFQkN3VUFBNElCQVFDTEJiVkx4YmpQVHNPN3JiZUZYcEkyRU5manZRTHRZVUMrb25NSDQveXVNY2o0eUxuRgpXRTNrdWU5ZGtVN3BKMnZIN2kwZUFGbDNBNFZuVGgyeFB3dEhxSFhOWm8rZ2owdmc4dEJrV2I3UCsrNFhRSUk2Ci9qL0piZ2FERm15elNvUWthRE90QU5sd2hkaW5Lc3JLT2k2akp1aU1SR3QvMWU1TjJUSEFnVEg1a3NrWWZZM1IKNEJBMlR4N3o5WTNhOG9qOHlrRU8wakI2S21EVFNNODk0dEZxMkR5REJPN3pIWDlGQWxzTUNua1R6Slh2a2tWcQpydUlCL1RKVEFuZ1pQRVdXOGJubTVQekQvZlV6bUtiZ1ZMQkhzcG1CcVhRUlBwbFl3ZEdxbmhzc3VWamo4Nm1SCkg3akFsZnJZdTcvbHZwQTBsOStzYTVuZlZYdldmRVM0dm1IegotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-02T15:39:55Z" lastUpdateTime: "2026-07-02T15:39:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved