--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T03:38:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T03:38:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T03:38:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T03:38:47Z" name: csr-t5d8q resourceVersion: "5935" uid: ee3d09da-3f89-42b7-96dd-f87fac4e0530 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a0e5021b60a4bab345a5880be3ea2bb891c9c60e2e1570be9b9ffbedd450deb2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-94.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRSVk3RS9nWDNicTlubkprVm96ekU3akFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXdNek16TkRkYUZ3MHlPREE1TURrd016TXpORGRhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekF0T1RRdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNkluTm1yeS9ObWFwSXlDYwpQTUdNc1l0OVlhajVSRnBwZG9zYzBKK0k2YjdHZDV3czgrMk5hbnFYT3JqQ204ZEpKUW5GVTNzejBrYkhUcWg0ClZjWnhFYU9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRURIRndTYmFoZm5XL2lqZWpTbkcvVng2R3lRMlEvZApUNDVuZC90VEZubnJtNVVWSHdpMWNnbFliWFY0d2N0N25zQmtocjBtNGtoTUU5U3lQd0VWUUdYZE1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRNd0xUazBMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ0NYakFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQXhsd0lOL01SVmJzbXY4bHZ1L1hSOVd6U28wdmhoT2kyK0NsV2lWcFowVUR1cGpJTgpFWVhKN2xRaTl3dEdOWUtKTk5mMkNvNW1nYXZYY29hWUh1S21GQmQzK29UUFI2WUdRSDV1QjJpM2Vud1FkUGRoCmJudFdsMUVWcmlpWlhpV1Y4dDVUczJ6VDR3N2pUYkMvdURPYmdHVTR2K09jL1J6Y21WTEpyR1o3ZVdTYXk2RzMKbXQ2TGtqdUpkbnY0OHMrbU1rSUR1ZnFHd0xkcUdqVUk0QmxESkN3RDhaenNXbW5lcC9xQTZwMS9FN2s3N2hIbgpwM2J5UWFjNUtiRmVNN25XMGFiWjNHcjhwSEd3Nzg5TDRvV2gwNEsraTZ1OWRlSXFkTlFQdkhOeWhXZXZpL0ptCkt1aXBqRE41K2F6aE8vdGlmdGt3V3J4alpWODNsM2YyN0NuK0RRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-10T03:38:47Z" lastUpdateTime: "2026-09-10T03:38:47Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved