--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T13:27:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T13:27:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T13:27:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T13:27:20Z" name: csr-cms2k resourceVersion: "6271" uid: 4c5a833c-1852-4c69-995a-0f90ac980073 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fc3706b7856f83e3fb6d9f250cf2207ff3f749ee051f78dae1f1a4b61a400d43 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-94.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRTE5VaWZIT0JjeFlKK3c1WExaWHEwakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UUXhNekl5TWpCYUZ3MHlPREEzTVRNeE16SXlNakJhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREl0T1RRdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFaWRSK2l6WXRNN0M5a3FJdAoxeXUvYjFwRy9wMHM0T1lreVFLa3RUL0E5VGV5WE03Qndsb3dValpqTUtPZnR6eVgvWndqU2lyandMS0txN3RiCk5hQktJcU9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNEVm03UkUwUlJERlRHaTdtdTRNeWxRUWVtT2xaRQoxNlhadEdNOXhhUEJJYm5xK1lnY092NFEzaHBLWTVCUGYyNU1BRU15ZWo5ZmFTVEZIb0dLcUlUT01Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRReUxUazBMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ09YakFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQXJaNUcyRkVHR2VwRS9POVNjbUM4TWsyZmp2YUo0a2VyNWdUQ0o0VkJNY05BZFFHNwplLy9GVHEyeTRzWUlSZFNZY2pIY3V5SjJtcHpJbWpuSWE3Zi9rL1pBcDlsb1pYVHNSSDZqVlRIcEJHWXVScThLCmlZa1R0Rjh5Zk5VZjNjSFF2RktQaTFmWk1tRnJuSkNDRk9NSGQwd0hNdlZtL2FGNXVLM1JoTjBhQXl2cEZhbWkKNlN1RjhQclpocVovelJna3dXSUtDMGhKc0c2QkxSOVhnL1NKZjZsQ3pjK21zb0hBaFVVaDlHOUNpbnhCSlRGdApFeDkyNEMzU0xVQy90QWFPSjFqenZrcUpLZFFXa2NBNG55OUlxaHdRVjZMMG9ONXlINmNtV3BuY2hETkxYR3B6Cm1nRkk0TktvRWZxMFMxS1VNaloxRjdOTEhiSDhWcUZoMWVMUHJ3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-14T13:27:20Z" lastUpdateTime: "2026-07-14T13:27:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved