--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T22:13:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T22:13:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-16T22:13:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-16T22:13:41Z" name: csr-th6dg resourceVersion: "5968" uid: ac4cac53-b7cc-45c6-84d3-b484eaf7011e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=257cc1fd11da0543b54ae3c0b3dfdeab1c16bd1b67e9b1e28ce4c855b2ccf9b3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-16.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQU11SzhOUFB1T0ZHdWZwTkNxdHd1RWN3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ERTJNakl3T0RReFdoY05Namd3TkRFMU1qSXdPRFF4V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRFMkxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQko3aHRoNEo4bHlJQUJlbQpSa0JXZ0d1WUJYdUd1YURFQS9CK2laaTVXSm1ObTNudkhmOWw2VFJOclVDN05Kc1hxT09zZ0U0cGdidHJBTSthCldSUllISjJqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBT3QweFhuK05adXdiRFd4ZnVvMTRnUE9VTjcydwpsRmxEMStPVDBNMjBqeGRBSHp5RDNadkVHYnNRUUlzRmt2cHUxMUkrSEFpUDhIT1hUdlhNMC9sS2x6QXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFek15MHhOaTVsWXpJdWFXNTBaWEp1WVd5SEJBb0FoUkF3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFKQkpNMTJsUVpFM3JqWXdLdm11K2kxdGloWnVLcWJ5R0Y0VElnb2wwOFN3clZqRApNQTVkajlneFBLeTdTS3ZCZ1FlNlB2NllhVjkwY0lCTHkwRzRPa1VDZk1jZFU3VmIzdUxmYXNZcGpFazdReXJYCk1BNTlVSUNaZGtQd0lhRGFZNE9aR0I3THkvb1lqUHU1RmVrNWRiSWRObUNNOHpDa3NZOFF4eExPaWI0TW1iUSsKY0M4bmw0bHJ3c1lCV1ZudkdXZmVnaTUvMGM1ZTYxSnNCaHo2MDVscC9ranI0OHp6dzhvcTAreGVVYStFRStsSApydC92djN1cVJiV0JDclBLaEZiVlo5S0xEczh3ekNiZFo2c0dzNHNLRG54S2VaVnYzSTdKME1VdVh5bVIvMkFvCm5JTUljUERsTkcrY1NvcWc1YWg3M3BwQTEzUzFZbGx4eDVyNDBXRT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-16T22:13:41Z" lastUpdateTime: "2026-04-16T22:13:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved