--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T14:24:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T14:24:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T14:24:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T14:24:12Z" name: csr-jk64x resourceVersion: "5943" uid: 867a71c2-2036-4fad-b2e7-3e6368c2b529 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a9b4e3e41b178197f0b6ea9f3e5abd52dfbda2a150202fbbf97cf83ab6d5479a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-204.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQUpMSkV2TWdWSTdVM2RXQ0Nrck5RQzB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTJNVFF4T1RFeVdoY05Namd3TnpBMU1UUXhPVEV5V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRJd05DNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFRZXRnOGpLYnBQaXBIdwpUUXdEUklMUTFhSDU3QWdWT2xpNEgwTXhiYzhLN0F0Z1hKZ0pKQ1E2RTdpeno4aTQyb3hsKzcvbHVxU1JMNGZBCmFLa01hT2svbzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUN3UU5LODErcDdvLzVEdFpRMzE3bmtJYUFwNgpLTTUrbFhyT0lnNUZqdHNBbG92ZnBmNXhZTkdnZFRSdU1xb0VGS0c1NnUwdU03RmxyNjB6ZmRGejUwZ3dMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE5EQXRNakEwTG1Wak1pNXBiblJsY201aGJJY0VDZ0NNekRBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFVWHpvcGZiSGJhZTJTa3Q5MHJVcmRMdGtReVFLTHFGc2JSM01MSlF3U0R1MQpiZWIzblNIY3l0S2ZTREEzS296bEg3M21QeGJaVzd5TThZRUZsY0JhTE9GOUpFaEM4VDRSSklkaFRLbkdRZlpWCnc3bkdhYTdySlo2TEJOWkZ4NXUzRStET0NZZzFDNndHU3E5WXE5ZmMxYTdJWVlJcE01a2M1cEhSQmVQeU1Fdm0KTm4vZ2E4MkM5UE04Umg4VUtFY1ZOaWJZMHZ2TEhFcTNKeXJCb2xXbWk0V1RYZ2lxMGI4TkRFT2tkWmZWVjlyYQpNdTN6RVk0d0ZpRzAzdzZkVlNST25oeFZaZ25ua0FXTVBNNldZU2xpQVlhbE4yTWo3YVJpayt6SjM0S0RzcEpmCklCamh5R1pyWEgyalpKand1b1kxV0xnMHdWUk5zTzBjY0c4RXhJN25WUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-06T14:24:12Z" lastUpdateTime: "2026-07-06T14:24:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved