--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T18:30:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T18:30:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-21T18:30:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-21T18:30:16Z" name: csr-5k2zp resourceVersion: "5719" uid: 321de332-062b-4145-9f2b-5b6f17050aaa spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1a2ed26bb0bf99de6509b93f328f50b33cbfe5d987113e522f4b977128034b7d groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRFeUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkJ2a3o2ZGpybVVPUXdyQ3N1akdReEhzSWUyZlhQR3lKNE1RT1cyUzk1VjAKTEN2SHQ2UHlQUUw5a2RUVFdZK3hlWUdNRVB3TFcvbFdlUUxETjNzUVVXaWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTTNMVEV5TG1Wak1pNXBiblJsY201aGJJY0VDZ0NKCkREQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpRUE2dW5sejVBa3QyeDdOSkNSZzQvVjZ0cVVQTHVKak5tRzNsZE4KZlRjTTZjWUNJSGlMeWw3UitzTGVoYjJzenhKQkJiV0xkUXJxb3ZMc2JkLzhwWUhDaDIvYQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-12.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRYmtPcm0yc0VHZms1RlNHdHpUQ2g4ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qRXhPREkxTVRaYUZ3MHlPREEzTWpBeE9ESTFNVFphTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemN0TVRJdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFRytUUHAyT3VaUTVEQ3NLeQo2TVpERWV3aDdaOWM4YkluZ3hBNWJaTDNsWFFzSzhlM28vSTlBdjJSMU5OWmo3RjVnWXdRL0F0YitWWjVBc00zCmV4QlJhS09Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUM5OUpmVkN0R2FLdXVCUGxWZGs1YnB2TkJvY0RseQpmM0ttdEJ2Y1JUZlBOQkhUYWcwSlRqd09IYndyU3c5OHJHK1NnQ1VlY3dZdFBKMlZJbGlKaU0zSU1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRNM0xURXlMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ0pEREFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQWtQL0E4SUp4akNKQ2pjZVhHSmN0MDB6aWtyei9xbHVlOTJHYUhWaFRwOWloL1dQLwpQN1dMaE4rZ2hrMk43NGtJdDJnZSthb0cvQnhvdEVuSkpnWVdyRCs5V3J2bFlGM2pIZmg2MTQ4RnlBcDJYMm10CmFmUHJBYWNXYUQybjlubFhtcmMvZ09TMXpiZjZOSXlXcGROckpYWnI5ZjgySi85SmwyeUt1WDFWWGVpbUJQaTkKKzliS3M2UjArYnU3ZzJWaWFaSFZ5d3ZSdUMvVkM1VmpXOVYxUkZQZTUrUXl4WDh3RWVZL1JXS0gydXppSGZJYgpyQ2ZnU0VZdWw3MnNNdldnV3dEMWpYaWZ5eE0yOXo2Vm5ZSHRlazhJUGJ4bzVSWEU0YkdYRG8zbnlrMTd5MGFrCkRDOFFTQ1NTZ1JJZ0FvM3FjOFNqSC9vMUJuMyt5TFBOY21UeTVBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-21T18:30:16Z" lastUpdateTime: "2026-07-21T18:30:16Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved