--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T23:43:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T23:43:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T23:43:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T23:43:59Z" name: csr-xsc2d resourceVersion: "6959" uid: 38b142a2-6e00-4952-8ce7-5241820981c7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=66cf9fa3f23cfc1a19b3099c3b0c13508d234efe7be5933ea836f36a6a030702 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-56.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQU1CaFNTOTM4MFNXaGVpbzNQUlhwWWN3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qQTVNak16T0RVNVdoY05Namd3TmpBNE1qTXpPRFU1V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE15TFRVMkxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQktqcTk3Zm9FZmIycW9IagpRUDVrVmhYWjRPTldhVWZmUkNwdld0VDUzQlU2b3VWN28yeEhhSDdXeFFZd1Q3YTRZUS9JelMzNE9nTTZ5SE9qCjErdXJLN2VqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBVmdpWDdqVUNrWkIvSG96ckhsc3hEb1lTR2wvRgpNUXJpTURqK2IzMXdlVGlVaEtKUzZKWHhqWjNGZGEvSTJDSitvdEVxSXJ3a0Z3QUlZQWZlbG9jVW9EQXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFek1pMDFOaTVsWXpJdWFXNTBaWEp1WVd5SEJBb0FoRGd3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFNTXdFZ0hrQUxDank3N2FsRngyYVZuVThzWXNLN2JGSjZEd3FPSW45UVRvdUhUdgpBalQveXhSOGdPanAvRDRkc3VpRTFhcjZ3Qlg0U0M0QjN2Qi8rbzlpVUZjUXJ1QlJHREVKMGFsR0JUVFFZMXVGCk96MWFVcVZHTFBXQVg5d2x0ZlpiSUtyc3JrSnMxUVRQaWZiZHRjT2tIT25xeUc4QkQ1bDhnc2cwMHBTaElEMloKUlBZdjFlZWpLZ3o2TzZJblcwNWx2SVd4MW5mNzB1eE5weWczWTVqNXZnanM1eG0vUkpHS1A4U3FvTDFNRzJNQgpFc0RXandFcUNmTDNLUVJOWSt0TTR4ZTI0U0ZqTjdMOWpmQWd3YjVBUE5pNERWUG0xcXBzL0ZOTlpmUTB4eXdICjBodWh1WURUZzRjZUxZeFVSenRabDdVaWlObmRhc2k0bCtLWk1ETT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-09T23:43:59Z" lastUpdateTime: "2026-06-09T23:43:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved