--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T18:30:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T18:30:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T18:30:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T18:30:44Z" name: csr-r84zh resourceVersion: "6505" uid: 8342732d-01cc-4145-9ac4-30f87ece0a00 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d8f06fb5551c918818787f83396853bdfcb7717fc65f8abd725c445766278373 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRJekxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkVqRmdlemVPQ212MmZhZmhUYnVaWmdvTzJSRStNcm8xRVB0S0tRMFRjZzUKZWJ0Y01rVnlnb1lhSHdVZU1DZEszOWRDYXB5MXJvcm45NEljMU5QcXJPS2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXdMVEl6TG1Wak1pNXBiblJsY201aGJJY0VDZ0NDCkZ6QUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQkhrb0VxNzRjc2pzeHVYVnRzWnpFNnRodmhlUmRtbzdXbmV2L1AKZmJvTnl3SWhBT3BWSW9tMmdrM1A2VXJybGt6V3AwM2VWSDBodGY1c0szL0dzQngxbDhFSQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-23.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQU5lWjdTV20vMURjNkQzdHc5V0k1WkV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QXlNVGd5TlRRMFdoY05Namd3TnpBeE1UZ3lOVFEwV2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRJekxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkVqRmdlemVPQ212MmZhZgpoVGJ1Wlpnb08yUkUrTXJvMUVQdEtLUTBUY2c1ZWJ0Y01rVnlnb1lhSHdVZU1DZEszOWRDYXB5MXJvcm45NEljCjFOUHFyT0tqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBazlFcDMvbG4yaytqemM5eVVKWkFlaGdhVzQ2ZgpwSkVRcXpSWnhTM1pWTDRYSEd0OXNvWGRwTmMzNE5GeEl6am9GMVBlYUhTT3BSc1RXNU5nWGVJd0V6QXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFek1DMHlNeTVsWXpJdWFXNTBaWEp1WVd5SEJBb0FnaGN3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFEd0NJK0llNFpJQ3VGYnZENG03ZnFvZGZtZkIwWXFDSEJVUU1XbUFuZEdkMzFhMAo5bE84SDdPaXZ2L0E4eVJsUDRXdFpCalIreVg4bUVEQ0tweTBqVkJQRStUMUJ4eG83RXZBVUN3Z3B1UFpSY29sCk82c1B2SDhDaWNNL1pZcnhqbEFReUp0RWI0eHp2ZlpiZ2hxSzFoUTFCcUVHTVN1cUJnazhWdktTR3VscW00N1UKK0lCT09RSnRvQ1BQRWpjRTVhS2NYd1RRa3JtWWFBNTlIR3YzMHN2UU5rMk9qZzloSmhqUTc4T0xMNHBVNEZTSApSdVpoelVuWFFISTAzYXpnK0lsNDU5TkZQT3VrK1J1VzhQRkZmaUp4L1RydWc3WWg5SXpsL1NZVWd3SjVDbmQ0CmY5eE9YUE1zM0NZNDJkSU1uRXZzQW11UU9lUWVSVW1IM2ZFb0diVT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-02T18:30:44Z" lastUpdateTime: "2026-07-02T18:30:44Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved