--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T12:09:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T12:09:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T12:09:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T12:09:34Z" name: csr-xpb2r resourceVersion: "6026" uid: 7199b7a1-a7e6-4d9e-874b-32e6f9e3487c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=eaa1bf78b2fcf297a6f65110655407a1ce34578182e94acb74b0d840aff70f7c groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRVNUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQklpTUZGVkxuajF1VExPcXlyQ3RQRS9SdHBPZXRSS3dMY25nOEFhbHhmT1EKZC9EYm5JQXMzY2V5RldCRjNRRmUrMEFuZjVRZDQ3cUwvYk02bTgzaUJNT2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXdMVFU1TG1Wak1pNXBiblJsY201aGJJY0VDZ0NDCk96QUtCZ2dxaGtqT1BRUURBZ05KQURCR0FpRUFweFUvRExCRjV6TWRZdFNscVRQZjN6VEN0REEva3dGUFhJWEkKTHFZNUhaRUNJUUR5K09Fb240eTVLNWEzTEFNbXZrdS9vZ3VNQmM0a3lRenF3eGRxMDJVTW13PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-59.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRR0lKYjJ5T0MrakRsc3QzTjVQMm5iakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXhNakEwTXpSYUZ3MHlPREE1TURreE1qQTBNelJhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekF0TlRrdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFaUl3VVZVdWVQVzVNczZySwpzSzA4VDlHMms1NjFFckF0eWVEd0JxWEY4NUIzOE51Y2dDemR4N0lWWUVYZEFWNzdRQ2QvbEIzanVvdjlzenFiCnplSUV3Nk9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUREenB3YzE1N2liYlFTSnYyalFDejFkRHEzUUJreApPZ2dqUWJkYUhncG5aOEJoUTdBVlMwa3MyeWhqQnRHbXFMU0dKNVlqbGtWc0plUkE2RVFQK3NTWU1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRNd0xUVTVMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ0NPekFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQW01SXo4Ni9nOTJQMlJPYTE2WGNDMVB2VjdhU292b2Q3ZEdJNUFxRHNjQ0UzU24rQwpOKzdrckVjb2hTRFVaRTBSR1dHengyN3laR0dxcEFjK3lTL3R1c21ISXV2NUUwNWFMOUpXTGxrbUY1K09HRUw0Ci9saGRYaDRJRXhaL1FTY2pzM0daSmdPUkVvb0pscFJaOFlvdVpoTHV3WlNCSTdBRWVGbGRBQ1BXRk1zVzhieUcKSXpablFjdjVkcXdBUW5kcUVmejhEQlBkRmw2TlNkNkpMQ0dkVWI3YUJaNVhnWFZIcW9XeSt3VGpRM3JzdTlYRwpsdWtLclh6b3NaMXRSK3pVNU1QTTdoTStiUTlncFNLWndGY1ZwaS9veVFMNjN2UU9UMnU0bUV4UFROTzVvaHVxCk94bGRIR21uV0N4c3JieTUrMGpkaklwMjhTMWRyTHY1WnhlWHZBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-10T12:09:34Z" lastUpdateTime: "2026-09-10T12:09:34Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved