--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-11T03:48:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-11T03:48:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-11T03:48:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-11T03:48:49Z" name: csr-xgtgs resourceVersion: "6358" uid: 0d0093f3-8b14-4fa4-80c9-e219c25235a3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a3e266c8c1b36eb78addfe1166809d95337d3ec779eea81f5f4a1cdb2fea5056 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-235.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQU1RcGROVlppdXJCWlR1Q1BhNUUrTDR3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RXhNRE0wTXpRNVdoY05Namd3TnpFd01ETTBNelE1V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRJek5TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTVE5jajZWVnptTGtBMQp5eFRmREc3c3FPRk9ka2p0R0cySHZQc21RZ01RWUN0TFJqZTlOcEdTZnRxMVE0dEYvR1VQK2l1UzNBQzd2a25uClRmQXdHaDV0bzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUFNQ25wSXMvcmpHR01OWkQ5M0VaZlpjOUpSRApzSU91b2F1MVBqVmRWSU5vanZzdHlyZUE1UzBmOWV2QVA2Mm1MVDIvQW5VT0c0RTFiSU95NW4zUVlyVXdMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE16VXRNak0xTG1Wak1pNXBiblJsY201aGJJY0VDZ0NINnpBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFVMFA0cjVQK0dhbFhhcVZpY2RHT2pLRGE4M1l3T0NjQXp3V0hKY25rYXIwQQppN0ZmVXZhenRkSHVOZzhSZW5uN2hBQ0lQRzM0U3lBeEN5cTUwSzJ2WFJBVXR0ZXBUUnlBckZxZURQaDRMbDN5Ckx1aVB2SWxxUVpMM1RDRVNHS0FOWHRjMWIrRTM3QjdZTmtyVWw1YkpRSHNORkRxcmVjOVVjcDNBdG5UT2lWQVoKQUpVR1VmeWlHdWdLaVRFYmczeTdKQVN4Tk5kSTNOb1VZb0Z1Z3hZS1MrWW80ZnFmNnNCdkhsdHdMZk03dmhkZApYT1NIS2U4L2dIRHl5NEhPdmoyeVpjQ3VteDFJelBlU2ZZdXZ0U2Urazd2V2ZKalU2ZnJnajhzQms3L2R0SlA5CnpLYmFjcVF1TGIyV3lxMjhmRXpHVGFxajZFaW82RWZnbjZlOHNkL1Z6UT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-11T03:48:49Z" lastUpdateTime: "2026-07-11T03:48:49Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved