--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:25:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:25:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T18:25:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T18:25:33Z" name: csr-j7kt5 resourceVersion: "6090" uid: 8524e5d5-4eaf-4147-8d4c-48e6187ceca8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7fdbb51b74952c22cd1b4a09db48e0846213521469ff3d7471f45a7cbbbfaf48 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-101.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQUlZK3ljTGN3T29hTTNxUitxV3UrY2t3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTVNVGd5TURNeldoY05Namd3TnpBNE1UZ3lNRE16V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRFd01TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFUSkFRQ1pLUzRyUzJ1WApaWkxKTzJUNjJVa21lT1p4Mlc1aTEzWkMzQzRaUlZLMHphZUNTRFM0YnR5dk9hTGZhcm4rcU9MS2lzMkpCNFMxClMvYnQvTjlwbzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUF6aDdLNEM0VVRMWmtMbTZsWWtrYkdzNlNEVwpyM0J1NEhhV3VsTmpXM1daeG9ha0pPUElHRk5KeWRrT2laRnVkdjlOMDljYk92WHdOdDlQRytwT0NxY3dMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE5ERXRNVEF4TG1Wak1pNXBiblJsY201aGJJY0VDZ0NOWlRBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFRZmJTMit2UDJiODV3YVRRVjZCMWF0T3lDZ0tPK2tGaGsweWlmWTF4Y3JYbQozQ0lNUDN4bWFpeHEydDgrNEpxZkFFQTl3bUtFZmx1K09ZR2h1L0RXUytDb2puY1JPckNJb1FzTHB2ZVBNd2RrCldXRkVmb1h2RklLQVorZXU5TlRmVWRUMDc3TzBIRm1uclhxRG1zU1d2QXdrQlMvNU9PTjJvZzFNSFR2WC9IWkEKTUtPRVh0VXpIcy9qZVdJREE1S0ZqTDZ2OHJ6SnlVTjRoU0hnQXpvbmxQYjdwL0Z6dzdiTnRHOXZqdHBKUCtMRwo4ak1SUi95WXdGL3kzOUtvZ0NEaTdGZlAvWmg5WDlnOWR4a0F0NWNBQm9ncEhjRjdzeDFEN3lCK1VOTlkvcVg5ClR2VnIzRGsxeFJkZ3RlcWVYb0lvY2FSYjFGZVJvZ0x0bjc5bSsyalM5QT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-09T18:25:33Z" lastUpdateTime: "2026-07-09T18:25:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved