--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T19:21:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T19:21:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T19:21:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T19:21:45Z" name: csr-dfxfz resourceVersion: "6335" uid: af3f8283-9555-4753-bccf-15897579889a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7f078eae4931bcb79f9d22d7c5cceb23273aa412795d12fca1973fc5236c5092 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-89.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRRS9MNDZ2R3NQR2F4Uk5YSVl3S0JwakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UTXhPVEUyTkRWYUZ3MHlPREEzTVRJeE9URTJORFZhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemN0T0RrdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFOURham9XeWE5UEhEYjVpbQpvS1g2R1BNWFhCblJOUk5pMTBXTy9UVnNKZGhTK3lIT3ZuV2NlM3Z0T2lyMUIvNzNVK29peEFxZkpVajQxL2Q3CjBhWm90YU9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFidkU2L0t0UFp0TlVGOTFYVjR3VEpCSVMyRzhZcApHVm5MTXVCMVRFdHdPdDBqUnJKN0xJZ3pUZkxEL3lobDEzemF0VzJraGVZS0kzZVhTZlFETGhjdE1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRNM0xUZzVMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ0pXVEFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQUsxNGhkY1pUSVNpZGZMS1dFRWlDSWhWVG9pcVNhVTRhWGkremZ4VndGREQwem9ReAoyZ3lNS3BlclRWZjJoY1NFSHptWmlabG1uMC9Ocy9vUkR5cnJsNnR6U0FFWEJlditramdDZm44S1ZkV29kVGVsCkNEeS9NZGc5ZjlqeS9URGQwelhvbW0yV0t1Q21qbGxIbjVGcVhxdm0rSjJBaHRQSGVsUy9DdUpuUk9EMzRhVVEKci82eFBOMUp6TjVBaDNhblVqcVI4cWpmN0ZmN2U4VGQ3TEJFY0dyOGJEWUpsUWtWUnRmSE0zT3RWSEJ2Y2Y4ZAovMTZ5QmdwYmUzTVJOeUlrMXplTVZzaktiSTBabHVSa1BoK1hYSHpNMzI2eHhHUlQrcUpvUmduallUR2NZM1hFCmVCRGFNeVUzUDRRa29VOXVXL01oaXVSNWh4ek1rdnpwaGNEZ3pnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-13T19:21:45Z" lastUpdateTime: "2026-07-13T19:21:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved