--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-23T16:35:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-23T16:35:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-23T16:35:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-23T16:35:18Z" name: csr-8hq9j resourceVersion: "5803" uid: dd05773a-0112-46a7-9940-3c59c3760aa5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f276cf965cb9c85b13b2cae4597f13efa883f01a55d409e0465b011c8dc4a1dd groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-27.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQUoxTHBjSTBBc1hEcytDTTQ5NWQ3LzR3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESXpNVFl6TURFNFdoY05Namd3TkRJeU1UWXpNREU0V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0yTFRJM0xtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk5vR1FndkdJcElhaW5uWAora095OEYxeGpXWkd6T2p5ekFkOWZtQ0dYa09TMXVlM21DZEN0WXI1dGs3bWtVdEZCRHk0OGZRU2hkVVMrRUNnCnE0Rk1YVkNqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBdXVXQ2Q2cERLZmlnR3ZlOERmZ2Y1N1pMa25QegpGVnpLc0FGUnBnVng2bXN2cWVyeFBNclZ1N2pYUys4SDA2d1lMa0RmbmV4UXo3MzV1b21jbGpqbnpqQXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFek5pMHlOeTVsWXpJdWFXNTBaWEp1WVd5SEJBb0FpQnN3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFIYW5DSGMxdXJQMjlRUHhlb25VZy8yRnpOdGlwRlRsS2NKRGRvNG5ybVozTDhlcApqNEpoVExwVmMyb25IZmxxQUZEdFdqNFVZbUYzMWlhaUFZMy9RNTQvc1FKY3pYZi9JbU4yTm8xY1pVYVk1Q2puCmFXRFF3S1dHelRFOWdxdWFpeVRtcnJOQWRVeHZMeEpielIrT3k0SHdERHVyWVdXL09mTjBBVjBXSDF2QWc2dlkKcVI0UEsrZmJQcWE2Q1hKUE1NeDN1NEtiWnUrRWpjMFJuNGxVNzRHd0JMUnUxVG5PNTFXNXVuSUthZG05Zkp6KwpLQkdmSzRDQXF1RGVGSDkxaithemFNZU02UkloVjNCSnM5ZHFRR1c3U01hSVhweTAwNDdVaVZCVEJHdXRBYkRzCkFBSWtmaUd5YWtPMlYwektKTHA0dVhuTmRMTHBZOXRsTmovcWt5MD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-04-23T16:35:18Z" lastUpdateTime: "2026-04-23T16:35:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved