--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T01:47:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T01:47:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-21T01:47:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-21T01:47:39Z" name: csr-tjkmg resourceVersion: "5987" uid: 1cf37cf5-1bb2-4c96-97ca-36d8d1fc062a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e1b0839cddad5722fe2967b999ac25b0347a2535095690f5a188c2c7ef0bfb21 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-167.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQU1mTk9MTDhIZlQ1NFU5OHdkeXkyRFl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05USXhNREUwTWpNNVdoY05Namd3TlRJd01ERTBNak01V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRFMk55NWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSeU1jdXc2WGNhTHNkZwpaYTlMeWV3NmY0YXNYMmpuWUl1bzRuTDdPQ3p2RlpTZVl0MHhQVzA5UE03S3NVZDVjNGREbllZbFZGYlpFVytPCld3K0lYSEMrbzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUlua25hVFowUnRMN1NQQXdrdW03WHV2SExEegozTU5oUDVjdnM5cFJDNjBuTkdMQXRzNm5JQlJkMWgyc3Q1K2hqZWNUQnRFblpFb2VDUVpWNHBRSUtpRXdMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE1qa3RNVFkzTG1Wak1pNXBiblJsY201aGJJY0VDZ0NCcHpBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFtOHlaSFEwWllIL3dwSmxzZnlJSGFRMUI5MUJuKzZsaStxcmo0citNb2F1agplclhLNVN5Yk9LbVlRNEFBeFJyeUJUWEVDUHlwVDVQOG1EQ0pJd2c4Tks5WUxnVnp0OCtjK3VYNHgxVWttYXdHCkdIOGpNWU9kOTdtajRadnYwTE1tcTNmU0hJRDBCaFZKTi9HWW5ERmcrdVRteDArdXFGZHlVNGpLdEVnTnJrSlEKdlJuMjdlUXMvRkhwbytJbmZEaVFLQ3A5QWFpY1RiWXNUNHBWcEdLcnJHc2xPZDlmZTBTWitvclFtd3cwdU80TQprRlZETlZxOUlsOXdZQjN2bDhTOThIbVhwOUhOQ1pDalNNemUveHdVUmdiSEhHTGZ3YzFxc1M0UE9FZmk3OUNYCkNkQnZqTVlBNENKL2laY09Ud2p5OEhFSUJPRnV2OGRPbjFUSkEvdkdaUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-05-21T01:47:39Z" lastUpdateTime: "2026-05-21T01:47:39Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved