--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T11:38:37Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T11:38:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T11:38:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T11:38:37Z" name: csr-hfpxv resourceVersion: "5834" uid: 25c2daf4-2210-48ef-9fb9-0e5696fb0d94 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f3991f51694b6033cfcfc5bb04e3d2ab968b4fcddfd3705cc35fabd0bea2f33f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-171.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRUmEvQVl5RnFBZml2aDBZOTZZZEVtVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UY3hNVE16TXpkYUZ3MHlPREE1TVRZeE1UTXpNemRhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREF0TVRjeExtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkdBQWRRVlhWQ2d4eW5zcwp2SW5OanpSUHl3VGorWXRDRWh2TkNsWmVMcjY3ZE1aNlVSNXZwUnZSaE5lTFMxeGlSYkR2bEMzOExrN2hZN1BHCkFsTmMrc1NqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBLzk4eUllRXU5UzB0SkorRkdKWjk0SVdVTlcvSQozbTZWekpURVV3RHRnNlRoOXR1N0hpVExmVW5wcmRNSURYV2pGQlQ2UFozNVpGZE5SazBUWHZZTkF6QXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFME1DMHhOekV1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSXlyTUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQ2Z4VmM1bDFUM2IxcEljSE42SFhsUVI1RXFUOURwcWI2T0hkMGIyenpzMDVxQgpXcVdTMnBoTnorcks0SzRuOGZkMDU4dkhFNjRxNEpiVEttZ0lac0xvRUVhSjZ0TkRlZ3ZTaENLUkVkb2VLS1hlCnhhUjE5UGpKVkExalp2N24wWWtleHFpSnFZQlRycEt4dkF3czB4bWRRckFHVDl5N0xYcTFhMURzdm5yMmY4NHgKU09leTd1R3JIeDVMTnNzVnhlcEE0M1cwdXpteWluWG5oREpiTU9wUzBtZSsvQndrWGIrR1poTyttcUpqN1JOUQo0NDQzRFRUU1JYODJRay9QNXdOb21vUmZjTjgzTEhJNmJtSFNqTDZUem9IbXIvazNSTithNjcydTVubFJlaVZUCmRkWWdvbFlRNVFibmVvR3pGU1cwQmE0Q2VNcklvd1MwZkdwNmVodDYKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-17T11:38:37Z" lastUpdateTime: "2026-09-17T11:38:37Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved