--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T14:21:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T14:21:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-17T14:21:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-17T14:21:46Z" name: csr-7w7fn resourceVersion: "6328" uid: ceb1f9d3-4184-4b3c-919a-abf694f87c11 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=410c4932e3df12a15953b878c42f0eec5dc3b65f7e4c69eea06b40f4af54e577 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJUQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRJeE5TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTamJCUmphWTJ0bVh2eUdTdTlndndEWFRuNFRYTm5WbmRkQmJreWNRRVoKUE94Q1JYcEgxSHJwbkdiZW1mbXdQRlJqZi8zRXlqM1pBKzk1K1Y1TzhKcVFvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNeTB5TVRVdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJL1hNQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJQWt0UzFlcnFhc3RHVmFMSlZnVXMvUE5KdjJBSXhaRDJUNWoKaDZ0Q0NtQ1NBaUVBcEJIMU9QRTBabHJTM3BPc3Y2OXhTZ0d3d01CZXBoeitoWnEyaXhVUFlTaz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-215.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQUxKYW5vbDltOWJQcEI3SVl3Z2VDeWt3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ERTNNVFF4TmpRMldoY05Namd3TkRFMk1UUXhOalEyV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRJeE5TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTamJCUmphWTJ0bVh2eQpHU3U5Z3Z3RFhUbjRUWE5uVm5kZEJia3ljUUVaUE94Q1JYcEgxSHJwbkdiZW1mbXdQRlJqZi8zRXlqM1pBKzk1CitWNU84SnFRbzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUZRZU9wSTk4dndROTh6MWZLaGtFeFcvZU1XSQpHWUZvZ1BuSVZrc2dSOGs5OW05M090bGs0NU12S25BRFAxZWdQRGxuRFBrejRyWjlUcEREcVF0VXhqNHdMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE5ETXRNakUxTG1Wak1pNXBiblJsY201aGJJY0VDZ0NQMXpBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFnUmpWRHM3eVdMcGdWMld3UW14Mlk1K05YM0txdHdpSVFCV0o1Ymh6WElUYwpxYUhBSVdrcStnNjJ2VVAzRFNSNnJTLzVMNmxVNEU1c1FpeVQwUm50aC9OMklYR2hTa0drT1lucmN6SDRwVHVaCjN3c2dYWTZqNWhaeUZpMHZSbFROankvOGZzY085UFRaaDZKc1liQVp0ZG1CUmtZVEl4cWRsbEEwcWhCMlltakwKeUVMSzBZS2NXMXUrWkZFazhCVFBXVXZESEwzMWRZUnNnMkpabkRaaVRRcUpScitldlpFWFpIbDgzQkk0MjIzNApNcjVQRUJvZVptai9tbEo3Ujl5bTVqMXNuSXc0TVhPdTVnT0o3bGJmS2FoUjQ5N2phemRLcFZmdUJIQytScFFiCnFQaUFuSDM0QktIZ1FEK0RsWXljWC9qQXhnMEJoRzBXTUpHTUdkNS82Zz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-04-17T14:21:46Z" lastUpdateTime: "2026-04-17T14:21:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved