--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T18:46:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T18:46:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-28T18:46:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-28T18:46:57Z" name: csr-cpfgc resourceVersion: "6651" uid: ad67b789-7d73-4008-b233-5c15699b5ea7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1c4c2612b86a8de20a31c80445f50abfe86614b93a89f222be4bcf57349917bc groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJUQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRJeU5pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFReWhyclpEcDhkMTl0ZmZ5VWRpcHRic0h5ekQzdzNwS0tocGNndTRTU0EKNVU4NE1IdkZyYzBwa2kwL3BOTExwRzNZSjZQa3graVlyMzVDSG5FeHJDbklvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpOeTB5TWpZdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJbmlNQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJRFQrV25KY3NoWWRtZklWZzBUZW01VnlmRkZTNEJBcVVhVGkKNFVzRmg2amFBaUVBNmtXRkNnNUVkYkVKWFZ6YXBqbVYyQ0FxeTJGNk1BYnFTaG5taHhVMGFqZz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-226.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRYmJuaUpoWkFLdjBleTJZZkM2THdnakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMU1qZ3hPRFF4TlRkYUZ3MHlPREExTWpjeE9EUXhOVGRhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemN0TWpJMkxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkRLR3V0a09ueDNYMjE5LwpKUjJLbTF1d2ZMTVBmRGVrb3FHbHlDN2hKSURsVHpnd2U4V3R6U21TTFQrazBzdWtiZGdubytUSDZKaXZma0llCmNUR3NLY2lqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBZFNDZVFhNzRMekh6WEduQ3ZLQW1hc2dURk5vcQpMU0tGaS8xV3lJbFlteHBlcitCZHR6K2hmSXpTL0hmWnJFWDJkT0pMYTNNNnVKR08vRVhIcVdtSzVEQXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFek55MHlNall1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSW5pTUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQ1hjMUU3bk4vOE5CejU5OWpQTW8vY3FWUVFaQTFKazhIT3BoMEJyTGpNeXZUSgpmNnlLRkF1cHA1ZTl6cFpBVGVDYUp5WWNYMTVLSTdIK2R1Q1JOY1hOdU1vdlArTmJNOUhKeWJvWXRVby9qN252ClY5L0swNENGZUhWVERUWW9QdzlhWHc0VDlGVWwrYXpmMldLY1pqdUwxc2NBc0d1WHZTSm1HUmNIZU5ubEVPbTAKMmZIRXdTVGtXbVpScDQ3bDNpNjVmQTF3ZHd3ejh5WmErMTdXVU5naXo1dFJ1Z0lHcEpnaGxhckJDZ1lSMDdRNgpzSVVscXQzT0doNW1QejNVY2JZc2NQckxlUXJveGRpTTlWQ3EzMEJad2NrUG1sVmdSNHJ5QTNXY3gwK1FYNU51ClJNRXVUNEdLT1l4R3BPdzFkZTNldmZTTU5penJVUllzVE9Ta3pSZnYKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-05-28T18:46:57Z" lastUpdateTime: "2026-05-28T18:46:57Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved