--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T02:19:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T02:19:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T02:19:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T02:19:46Z" name: csr-5s8qx resourceVersion: "6413" uid: c7a443d6-1913-4d0b-b7e7-9600b2e9820d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ff2106510700ae87b8b8b2e1aeb5c687cd20287d8193f8aec572cf6e381f1c15 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRFd01pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSQm9lNkU3WkZ0Ukt1cjhpaFdvOExxem80dzZzaXRNZXdrK1hiNkhIcXEKV2txczIwVmswU1lFN2MxZlk5emQ5QlVZa0MvcDI4MGpreTlFbnVkeDJlOXVvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNeTB4TURJdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJOW1NQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRmtlZ0kxZ3paL0MvQU05OUNUTDUxcW1iQ0dsN0IwR1VNWjcKRTNRcGJQakNBaUE1N1ByRnV6Yy9mNU9JQ0UzcVJMaHFGdHBFQU0vbVlwUjBGYzJGL2FhSXVnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-102.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQUtLNzY5OHFhNkwya2o1MllueVlZRDR3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qQTVNREl4TkRRMldoY05Namd3TmpBNE1ESXhORFEyV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRFd01pNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSQm9lNkU3WkZ0Ukt1cgo4aWhXbzhMcXpvNHc2c2l0TWV3aytYYjZISHFxV2txczIwVmswU1lFN2MxZlk5emQ5QlVZa0MvcDI4MGpreTlFCm51ZHgyZTl1bzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUNsZERKRWMrb0hmSldaRDdSWUdiNDFlT2hZQgpnVGlDaW51eGNRYlNocTVhVGpNL0U4ZFJLdTNMQ3NUaENndTM1UlZKVDkvUmVMenBYVTVqZzY2bHNZY3dMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE5ETXRNVEF5TG1Wak1pNXBiblJsY201aGJJY0VDZ0NQWmpBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUEyc1JabnZybUNhSHVvVUZlM054dFBVQzlnYklqUjZmWWdOd1VlWXVyOEZhVgpseWNDQ0xKMTJYcDJTaDdiSXc4ekRtclJVTHFVNmtFN2xCSkVabFpQTUQ5NGFXTHhnaVIxcjB6RlVuMDBTZmxtCkdMMkFSNG9xblBiSnNSb21BYTB6TE9vUXI5RWtFMTlBblpZRlBScXVhNG5QQUhaRUlhc2MzSWJka2d3OGU3U2oKWnFkZk9ySTZZZ2RvcU5TY0pQR2tESVpLMDN5bUxEcEliY2FFNkFDSy9vU0ZpcEJNcnp1MDhzWTFNUU0yZk1TWgp5a0pTcmcrYzRWdmdnc0FNeEEwSFpmaXRNcXU1cm1KbVd3WkJXUityRVlBOXFsRXB6YVlVRllKV01tZ3M4MktICkk0T0JsRWdxb2VBNXl5Vm5GZkJDU3dRUm4zZCtGMmxGZVl2SU1OTGNwUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-09T02:19:46Z" lastUpdateTime: "2026-06-09T02:19:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved