--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T18:15:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T18:15:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T18:15:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T18:15:34Z" name: csr-888l7 resourceVersion: "5523" uid: 12bd6e70-e1fd-4391-978e-3aed02e8b007 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b3ed256f761419f8d0089acd38d9677e057604769f61894c7a6f00b6b554ba76 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-253.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQUlSOHFPSmdPejJjN21BbitHRnN2aDB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URXhNVGd4TURNMFdoY05Namd3T1RFd01UZ3hNRE0wV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRJMU15NWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSbnlUbzdYdmQzVG1VWAoyT2s4cGM3NGpOdUJqN2lLRE1qMTlabVoxMUFBVnlQdW55MTlMUFRQVWprRFBkZW10QnlxSDJacTZqYXltSFNZClRtT2VFeHhybzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUlTMGE2ekFWbHpLdklkMDV4RjlXVUk5VjVwTQpDdFA1QTZHa2duNjNmV3BlNm54U0JBcEthT0J6Nk1mU2tvWW5IcFZaUXlhS0hSTmZ0MlFUQXROUGRHOHdMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE5ESXRNalV6TG1Wak1pNXBiblJsY201aGJJY0VDZ0NPL1RBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFUTm9VZkJndkk3NCtGb3FyeUUzcTRSc2ErZEpCYjlEZWpqWWNieUdXQ1F6MQpKTDRIUjY2YXJqekVTTS9FOGRnbkxMaENST2syaVBjdE9uSFd0Q2w3MS9CS0ROV3JlKzVLcUdma3RjOTQ1ZThQCmFydHRCZzNCcTRkOVFQc3U1aVJWVG5LemdiWHBIbDNoYzFTY0l5N1pER3UwdmNSR3ZUOGZQOE0rMUk4azR4UFkKandnNE1XNUtoRThiMHBXUjIrcUxHdWNnNXBIZHl3OXBESWYreXJ6d2J4SEsvZEFqUnpqc1p4a0tmc2libGhnYwoxaFJCOTIzeTllOEhza3p2TTJoN2JROVFCVE5jalRobC9ybm9zUHdLanlOUDVTMi9KTk9Da2J2TmIxOGNHcGtqCkc1MGxwUEpHZHdxV01EZjFKVUFQbWFmTUlEeHBaQVlFK1hRSnAwZy80dz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-11T18:15:34Z" lastUpdateTime: "2026-09-11T18:15:34Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved