--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T14:35:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T14:35:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T14:35:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T14:35:00Z" name: csr-gs4x6 resourceVersion: "5812" uid: 686db82e-b1c6-497d-8dfb-11160e93eb60 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e59b4fb04a954900da33f01a3b71426001544171f955470ae8ac354a133e3500 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-222.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRT1BqU21xMG9DK2xqL1kwcFc2V2lqREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UQXhORE13TURCYUZ3MHlPREEzTURreE5ETXdNREJhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNelV0TWpJeUxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk1qbElYZmFYa0FSaUNKTQpLSkM3c0hzTlIrTVZ2a2cxMVZyNVEwVDJwWHY4L00vS09EZy9iaFR0QTkxaE16N2Q5VDdoZ0NiY3JWcmZHOE5KCkI4Vm1sMGVqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBWTJIQ2ttZlRwUUZ4VXB1b1M3TjIvVFZVYXZNVQo2b3RPcjBjdDM4Qkx6NXpGTnN0LzQwbG9lRVpTdTFWYjhLNStKUWg1ZG5QTXQyK2hURG9iMnc3czREQXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFek5TMHlNakl1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSWZlTUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQmh6ODRsT0YzaXd1U2l5VDBTd3k5a0Y1cVVJS290NEFvbk9KL0kzS3oxa2lmMwpkS0hrV0dGWlR1czUrakdUeUhNalVQWmxiSDBWdjFuUlMvak9YTmZpNWxUdnBFeXJqeFBwdGtJcGNNdVlqUXRiCnk4OHllRE9lWjJsVk1wN3dBSmlHbUZ3YlB1WDFtQkVYU2hwQXhaY1ZwbkNuTk9zY2hia3dEWVZlQ1g5ODV0cVEKRjlXWnNvdDVKZngxS0hCTHE5dG5HdzVFQUNrMXUxcHdITzV5U3NjREdlVU5QMmtXdm1EVU12d1RGVk1CSG8yUQpjL3czTS9TWjQ1ZUt0bEU4QUhGZFdKVS9iQ0daWmZ0dHJIdWUra3dsRzJ1dUlxdkR3MTdMUmxjYnN4bmovZnVnCjE1ckFDWjBKVDBTMG81Tmg1eVhyUzg0enpNUGxVd1V2T0wzeWpYTkIKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-10T14:35:00Z" lastUpdateTime: "2026-07-10T14:35:00Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved