--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T18:30:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T18:30:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T18:30:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T18:30:09Z" name: csr-4htrr resourceVersion: "5667" uid: 0bb214fb-7aaf-44e2-9dd1-075b24ce5fd6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=34a0706c4612ea63f6ee488287ba9ea81fca804f4973f4a9d0130666020213ea groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-68.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRS3RYVFpKNXVaL0NJQm12L0ZyRXF4ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01ESXhPREkxTURsYUZ3MHlPREEzTURFeE9ESTFNRGxhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREF0TmpndVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFdm5oaGtkUzlqeVFlUGU2eApMVVZzTUVMMWdZdW5wS05NVnJTa1I3Nk91eDBla1N2Ny82U0dSbmNPdXhKZjQvekxhaWxyeElIcWpNaEtiMGdXCmMvTnI0YU9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNUMFNuZitXZmFUNlBOejNKUWxrQjZHQnBianArawprUkNyTkZuRkxkbFV2aGNjYTMyeWhkMmsxemZnMFhFak9PZ1hVOTVvZEk2bEd4TmJrMkJkNGpBVE1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRRd0xUWTRMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ01SREFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQVQwKzdDd2VwLzdHL25iM0p4Z2FnQm4waTROUUFBYlZHYllXVVhRYzQxSi9uZmYwaAp5VUxVRHppUnlnUDVicGM3ai9CbUNIaGRJbzBBaVczK3RBK2VzeVhSMEpYU0xCMEdDMnA2TVBPdVN2aGYxSmcvCjByZFQzdFc3RUtrOUF2NVpYRGVHUmhuYTJURmlUSDloMDZXd0E4R3ArKzZNK3NMWjlOU3VTVktRelNmVTYyRFUKcDd5cUlGdG5TbVdYNkQxajB0NVpiYzRvNHc3MVNld3pYZVBmL3R6NXlnZStEZXNhZUp6cVJCdld0ZHk3RDVWQQpTY1oxOG1sMERGQ2FVSlpIZ203N1ppZFU4TGVCMWRPS01Ydk5PdXEyN2JBV2NzVW83SGsrVlY4cG1aeTltN2VqClppRm5aTUFpQXJPWkR1TDJ0dHE3TjlKbEpDQ3Z4M2ZKdDBwdzVnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-02T18:30:09Z" lastUpdateTime: "2026-07-02T18:30:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved