--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T11:22:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T11:22:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-25T11:22:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-25T11:22:29Z" name: csr-5q942 resourceVersion: "5685" uid: 3367b817-8acb-43c0-bd33-fe873f8e3fd9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7e1b0961039e07f80fa6ed62184e058f67bc16d948d63cd02ac7a5219ed51d51 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-184.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRQ2doM2thcklNclQ2cksxRFVvWnBkakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qVXhNVEUzTWpsYUZ3MHlPREExTWpReE1URTNNamxhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNelF0TVRnMExtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk1oR25SSkkvNVlOL0xUUApjYmxpcWxIc2VPRHZrd244V215a3ZOc25kRTRJeGJoQUpqVEFHS0tzVFpoZEx2SzF1SjVYWnNoREJuZDd5eUxJClNoL2V3Yk9qZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBT3lraklYeDQyZmFnZXhaVjhVMDZ1bTdnL3JVegpVQnJoRnd0SFdZSVh3TE9nN1V1NXZPSWFENzRzWW5KNzhEYWxHNjNHZkU3aG9VSEx5QmpKRzdqK01qQXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFek5DMHhPRFF1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSWE0TUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQmJjVVQ1aWNHK1hiRzJsOWpvS0QwSnI5Rm8wRHBueVRlemIyZ3J2SERVZVZyNQowakdoRHZpRWovclFXRFVTazRiRkxMZHg5b1BjWXJ2QnJpbTlTMDQ5anFMaitkeHBCb21saDllT2Z4c2VGRENFCjlMSUc4TDFYMTFDL0xaRUVnak1DcEhOY3dhcXEvS0s3eXBsc2lTRzhyR3MzcEk4RXNhRSsxVHNBK2lNclRPK0MKUHBJdzExL0g5KzhKOGhkS3pkdUhjeEhZTHIrWlk0OE03QnRqaTdLVit0eVNOTWJLSzJ3MHhjNXg4Z1p0UG05Mgp0ajZVZ3hQTGRhTzRtTUtobjRMMVZWWUFqR1NKaGczOCtPSWFtdXZXYnE4UUtBYm5uMW5jamFBVlBpZUNpaVlmCkcwNWZ5b3NnaXBGNHZHTlRaWG1ZdnROYnltUGY5UE1XdGNVRlRlSjQKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-05-25T11:22:29Z" lastUpdateTime: "2026-05-25T11:22:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved