--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T21:17:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T21:17:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T21:17:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T21:17:34Z" name: csr-96lk9 resourceVersion: "6398" uid: 0275bd3a-770c-4645-9af3-877f8cb0b213 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ba83c3e299a5cd4c160c3c6e861aca5ae1c318cf6a2144d3e46ee3835d0c8ec3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-133.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRQmNWRXY4WkVCRDdVcW1IUVowMVVQREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1URXlNVEV5TXpSYUZ3MHlPREE1TVRBeU1URXlNelJhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNelV0TVRNekxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkNWQW5DM055dGt1aURnZQo0d2lKZ0tkeFNqSS83TmVaMjJNMW4wQWVvdlptelRaS1dSUlYwQ1l6Mk50OUFhWlpjcm5SLzBvL3k3ZjYxYWxJCnl4eUM3QmlqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBK3hnd1lDWEI1aHBzaDJxajRQMk1FeDJVTHZFQgp1OEtqT0Q0ODhnTGpONWJacDNZMmFTNDFBalNHM0owTEJia21FNjd5V3Z1Nm5GalhBWWM2SDUzVTFqQXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFek5TMHhNek11WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSWVGTUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQW4wdXR3YmdTRCtXQ1ZYeGUzakVFZUR4RHpOSGFTY3dGeENrMjh3anVLZ3FVeQpCTXFvZUFTYVVDV3g4UDVGWWRkQXRlOC9qc29RZ0thUHVGVWFtQlNESEZpdkRldUxnUllBWmVHbWh2SUZqKzgwClY2SzlHdS9QOEdOWnNtUEx3dlg2R0FJbUdvemZSU1ZHcU9MNVRqcVRCMHVDSlNEbko1WW1CWXNWV01tMFprOTQKcFROZ0ZrRkxHT3AwN2NTWDNvZXJNTFlHMWtxTFI5MkVLa3U4U2gwVEtrZ2JZRVN0V0t5M1hYc1ZQemJxOVpJVQp5aldhbWNIV0hBTHJUS3d4UzEycjc1bTlYS0VYRXVDcUx5Q1dFY1IyTDA0N09sQmRJMUVxajY4TUNqSHRGV25NCkF3ck9DS0FXR0tkeng1SUFuL1FDd0dNNXR1UTM0LzZmeHJCTmtkeHYKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-11T21:17:34Z" lastUpdateTime: "2026-09-11T21:17:34Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved