--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T23:36:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T23:36:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T23:36:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T23:36:01Z" name: csr-jh8kw resourceVersion: "5940" uid: fbfa517b-b7b5-4fe2-bbfb-9e72fca286d2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0524dc1df4ab237d47879247be4caaf22ebebf0216581aab86cf8a2d56e023df groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-88.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRWm1Ka0NmRDVGM29GSTFNa3ZabTZkakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXlNek14TURGYUZ3MHlPREE1TURreU16TXhNREZhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNamd0T0RndVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFbkd4c3hMcHgwSjJ3Y3NTYwpmc2d3V2wxcVFlaWpiRzRpWTBxNkJaUUJkZ1FFRUdzQjc5Tnc0U1A3UFNndlQzdWNTc3cvZ3U4R3d1ZWtFeXc3CkdJTDRmNk9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNqWkNiTTNuUlpTb2dJM2tZWi9rNEZuK3dQcy9sOQpPL3lzek5PYUxTcWhCMkVubmJuY3hDTU9aUVpESFdxVGZLTTYxUXMweUsvRHB4ckRDS2ZtRGR6ak1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRJNExUZzRMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ0FXREFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQUV6Tk41aVdNK1l4YkJPVlZTK1l5d3oycEdJQ29hK1ZLcUFTWGo0OHZMTk54dlBvZgpHZ3NNc0tZMjVWNnM2ZjVMSnRBVDRpdm9rUkJGV2kvbjBtWlllNU9IbnNmdnBaYnRGRGRpYlpNM0NYUVhrcHVOCkMrUVBScTY3Q1hPTVIwOU5IeWp3a2lWUW0zVnZSdUtIZEpSZUhSajduR0FPR1dFcy9zM1ZlZ1VYMmE0dWNNRjMKYkROemZBR1UvR3FRZndLdGhSNWR2bVJPNXlRMGg2cmtScloxREhza05EaWE1d0NiVjZucXk3OXVWWEZka0VsbApVR3ZRT1NNNTdkYU1RL25keWVTejBpMENnRXVwelJwYjduRUM5ZUpqdHQrSGhaOVYvdXNWcEFNaDR3aEpuNHh2CkJxVFZNZ3pVU1VIOUdZTEFaUGdESndXZWw3VHF0dmd1UUlYVnNRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-10T23:36:01Z" lastUpdateTime: "2026-09-10T23:36:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved