--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T16:58:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T16:58:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T16:58:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T16:58:32Z" name: csr-rs9fn resourceVersion: "6457" uid: 871f7be0-0442-4674-8fc2-2db72ee8a6dd spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=05602a4a3eaa8e56dd56531c944e5d91a02e2af77f6f329413b682e9268b01d0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-111.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRRks3b1VKM2h2T1c5TWdvNmI5NzhwREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01ERXhOalV6TXpKYUZ3MHlPREEyTXpBeE5qVXpNekphTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREV0TVRFeExtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQksra1Q5eVZtODExbThJdwo4Sjd3bElIZjQxOGs4a1ZRL01sVkZ5L0dCQVYvK0ZrM3duKzltMWZRMU83bHBJRXJjcHN0TStIOTNydHhoZWxTCitRZlRpbjZqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBWmdKajZXRHJjMEk5OGV3NmF6VHFFZTExa2libgpTaC83TXVLM3NOZ2E5NHpmeDF4Q1JJcWRCL1k3WWxjUnJLeDhwaUYrOXB6ZHZXbEQxbDZTb2JHMmlqQXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFME1TMHhNVEV1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSTF2TUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQWdyckZ5V1RHVmduUE5sTXJ5K3ZPT3NPbFNlV25mM2QyRi9GUnVsQ1pzUllTYwpWM2dsZVlPV0RuUlVhK1UvRlBRdHMxODRuOGtXbDFhTzE1czJ1eURJREJqZTc2OHBUKzhTK0NYT1RSOGg0WFkxCng4Q3U2OGtXZ2VBaVUzRnNVN1Z4SE9HR2c1OTV0SllzZlRWOTdXYWNFc2EvVjhuSjU2QXl6c29mVldaOHhLbVgKdjBRaU5sUUYyYVZmYnVaRUVQZnZ5czRRemEwb0E1SS9RQlU0ZXY0UEllTHZmZlFDRzNUUVh6TDQ3TUp6dnJ0Two2YnloTkZ0aDlQNlEyVGFiZ1VHaC96NnJBalkyWU8wSS9ScUdKcXo1eWd6Q2pTYVdKRjhpbUhhdnlDaEdBamFiCldFb1MvK0czNzdkek9TRi9VWEczZFlVUGcybm1DbTlKTjI1dW5sekMKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-01T16:58:32Z" lastUpdateTime: "2026-07-01T16:58:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved