--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T18:29:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T18:29:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T18:29:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T18:29:01Z" name: csr-9kncf resourceVersion: "6385" uid: adaf9471-3538-41eb-a9bd-99123c8ccc43 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dde1ac125914a6932e47330913086f2a1767873293da9a6315fc4090cf2befa5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-196.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQUtQYnB1T21JTXhCb1J0Q1pRM3VhSVl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STNNVGd5TkRBeFdoY05Namd3TnpJMk1UZ3lOREF4V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRFNU5pNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSUHdqRnpuYmR6UU5wMgpqVThYVEVGcnYxWTBXbTRzbzFUd0hGSjhYc3o5c0taMVhCSEh0MlUvN24yTG10Z0tMajZuMmU4RVEvd3VlMzBnCjJmbWJNSzMwbzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUsxZGdER0ZPNkxpL3JaQmtwTjhsL2tNT2lkQwpIM2NYdEdyeVNkYkdTY012Wnh3cExnMXZFdnN2cjNiTk82a3lXdE42U3pDZlZ3WEhDaTdNTWI0c1pYUXdMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE1qZ3RNVGsyTG1Wak1pNXBiblJsY201aGJJY0VDZ0NBeERBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFvN3p1Q3ErTC81QU1Yc1J2QzkxUkt3aFlSU0o4T2VuWThxeUhkNmhDZEdFOApvRkdxRHh5cUoveGV2TWtRYjRzMHFvVnQwVk1NSFEwc016dGVMeVJCek4wenJRbGtJd0dLY0lhcCttSDJuSSs5CkJTL3dTcjJsZnZNeXUyMFRzbWxtSFN3Q1NYYTVWRHp6MmNSVDlZK0N1bnBKOURDL3JoQ2hjOVBsbHBSemNUQVcKVTkyNXJMbG5tRmNvQitHWFRTbXNlY2NNU3pTNWlLMFQ1Vms3MWpSVU9nNnpkdm1QREMyY1VYRlFqN1RINkI3VgpnRlMxeTZFK3k5S1V6M1Q5T2FLdVVJWFUrYkxSTTNoM2ZxQnozZGh0MnNnQXpCU3FJSmFUWnU5NU0zV0czdUZWCnRUejVRZDByemI3WlVuOXllQlFZblRVaFpiNW9RTlY2U0hjeVdIb3FmZz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-27T18:29:01Z" lastUpdateTime: "2026-07-27T18:29:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved