--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T17:18:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T17:18:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T17:18:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T17:18:45Z" name: csr-g457k resourceVersion: "6313" uid: 556a8bff-3bac-483c-bb72-3bb84a090ac2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=15ca9241a40caecbb8793799146b3e6580abc4d4e913500ad0004f4f055a63f1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-43.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRSmZuMTFRWTZoZjgyU2ZvNExDTCt3ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1Ea3hOekV6TkRWYUZ3MHlPREE1TURneE56RXpORFZhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekF0TkRNdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFem9vVmMzeVZ1aGRnWmlGdApodkRaREphZlBJM3NoNUQwNk5rY0tFOGIwUTRrN1RIMlgxakVWenBTVGRNOHFlSnpCRGNMRmpFdlVzdUZ5bmZ3Ck10VmVUcU9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJWT2xvMTRpcUk3V1pWYmZRc3BEWG9jNEVrU0dOTApHZDZ2dzVGay81aW8xYXZwZ1RXQm1vTzlPT1VwQ013Y2xacjBMQ3A5S3lSTzd5WUdOWjlxY2wvYk1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRNd0xUUXpMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ0NLekFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQUc5Qm11dDV3bWVSNDE5STJ6ZU05ODBzNzZJanI3bFUzT2NSLzJVTUFhMk0wMnlseQpFZHlCS1NSTERrN2pXdnVJL3BCZlFHT2xWVDFySm9UTlcrSDdsd1RKYzhYWWJHUTFjMmVJSU5aRmtiZzB0YWNnCjlQK3l3NGhycGx1VE10RlRVbnNybWdRYXk1ZG5tODA2K0JxL2g4ZzZFR3gvYzZqalNhMlJZcmJUNGxCb2p0VnMKNkNUa3dzK1VqYjRJeG1BdndGczVyTEkyNDFnNDdSYjFCdEt3SGtpdWl2YkFtZTVoQW1BSWNISmV6UWtsOFF4OQpXTTQzYXU0NDZlNmhaWEhHazlHeWNEZU94UCs1VWJNVDJHTmxyZ0NQK3JrY0R2UXpRbUFqYVZXa2VWQzZtUEs0CkltaStkb1l5eFZpbDRaa2NOZTBrRzlWOFdiWFZpSlZYMUJVamNnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-09T17:18:45Z" lastUpdateTime: "2026-09-09T17:18:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved