--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T18:34:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T18:34:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T18:34:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T18:34:11Z" name: csr-cvz2w resourceVersion: "6017" uid: 95b46533-56b4-47d9-af9a-79a866da9fa3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c81ae0039cb41a9d2811c6eb19d4e3d6e236e8c66dd391f3651c526b441afe09 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-135.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQU55eUYzU2NVekxXa0pHRm90WVE1UFF3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STVNVGd5T1RFeFdoY05Namd3TnpJNE1UZ3lPVEV4V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRFek5TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSanFQem5yeE92bUx6RApWQTRZYTE4emROMEF2NlE4MGV5Q09lOE9VWUkvclRGbmhkb2pzNkhoV1ZrYnNyYmR5THB5ejJmaXFXZSs4dEJYCnAxSWwzQzhTbzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUURNRGlETjZVNmV1U0hnR1BHeDkxd05SeGlVTQpHL2ppNERjbllpdG1lSnJ1Q1RmaThrUEcrVmFBcElPTXdvaWFjZ0hrdHJ3YTJmZWdFNXlyMkxWK3VVVXdMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE1qa3RNVE0xTG1Wak1pNXBiblJsY201aGJJY0VDZ0NCaHpBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFZYk5mTXdET1dUQVlXa3dGTFUreGd6Q3pzdVFHOHNjbElQcC9BT29nSTZaawpPNy9jY1dOSnBwZXEwTGNZT1gzQldsMEphUG40OHJQOVhmbS83YmtkSUk5dHE1WnhCNGw3RFpkNmxmdE5wQjM5CnhDRmMvN1B1cVN4UHd5bWQ4MDNGWXdyY2lvMGcvMHBMSitmS3U1VnFlRWNOZ0FTMmlsY0tQczMwZ3JrbW9TYVcKeHFwMUJ3dE9jQXJaWEpEYXFnb1psaVJ0QmVQL2t1K1R3SUtCRXZldFI3S1RkRlVVRnlxbVF0aE9pb2cyYXhxSQphVnM2VnBlM1R4S2J4T0x4cUZSa0Q3WEY1clM5a3F0Q0Jua3hjUnpaYS93SU5RcFI4czkvTDE0L0p2NHNVR3lHCkxCV09OTFpydjVYekJtN2FQaXpqZEhkcGQvRFlUN05XcnV4NFVjelE4UT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-29T18:34:11Z" lastUpdateTime: "2026-07-29T18:34:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved