--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T11:23:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T11:23:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-22T11:23:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-22T11:23:29Z" name: csr-kn86c resourceVersion: "5687" uid: c4dc2cf8-214f-4902-b637-82e389c7db6e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=96e2601ffaa0c361f1e540536291a11c9cb6884c60e6009c1be473cc870a39eb groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-126.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRU1BKczBkVGtVdUZjTVY2dmc3WmVKREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qSXhNVEU0TWpsYUZ3MHlPREEzTWpFeE1URTRNamxhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNell0TVRJMkxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkhUU1IycFlTWTlJREpwSApxSC9YNmo4R3poVDlkNUVvUksrWTNHWGgrb3RwVW5qSHNDYlp0SEVCYndHNGhVQjFETXJzd0V5bG9jdHM1WVV1CjVKakdQa3VqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBVjA3K2pIZG95cW5XdFprU1E4K25Md2JLSnc2ZgpNUUpTMXEyM2Y3SnJOellZOUlHN3FYYjA0eWZ1VXZjd2NnMnNMMmZxNjV3N0Z1WjJoTEQreWlWMGtEQXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFek5pMHhNall1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSWgrTUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQjZXU05xdEFpdTZYNVZTQjJ0aHpXSUFvTXV0NllZVDBHNzR3eEZlQy9GN1FVVwpOVG5UV2NmMjJ5YmxOK0c1ZjZYMWx6RXd0bFZiVDRNVmU4MzU4RzROc3poN09nWS9XRlU1cmd5NEFPZFVialFKCk1GdHZqUG1Rd1VQREFNQVhWTWxrM3RPcUozQzVycHZpdHRCZG1Wc24zS2piTE5kNm5jVW5QSFpQR1ZEeU9jZGQKR25lYjh0OG4yVDUzSGEvWkxhdWdjMVBDdnIwWXRFSkpBSiszdHRIa2ZwUVA1MDRGZXUwOW4vN1d1bk9BM1pRMApTaGw2K3lIQTVrWjBRZVR0U0pFc3plQUpwWDZWb2tHZzczdGZzdVorV0JPZGdFQm1oemhLY1lwSkRhdG9IbEZBCnVPSEgybWFhTHlvWUs0UEs1dnNCOFFDa0lnSnV1TTJpeENXMEs4cnoKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-22T11:23:29Z" lastUpdateTime: "2026-07-22T11:23:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved