--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:43:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:43:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T18:43:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T18:43:26Z" name: csr-z2k5j resourceVersion: "5772" uid: 0b213abc-4ff0-419a-8cdb-78a30d44d68f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=da2251165254a5036dd1e801d6b905d1018178ccf624858b899625f16d221d7b groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRFd05pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRb1M3Q1FSUDRIMkgrOGZCRURNeG5RMWxZRHMwNzU4OEtmeE9rMThxemoKaU9Lb0g5anM5Tit6MGxHQXFaTjYxTzF6ZERIWlFxMDZuL1lVVHlCMDQ0VTRvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpOUzB4TURZdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJZHFNQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJR3ZFMWpMNW1Za2dZOWFDQmxPazg3eTRDSXZxcWpPZUZNQUcKNXEvZ3ZuT1dBaUFjazFkY1NXUzUwM2ZpZ0VqRzUyQW5BcTBiU1NNdTdmbUlvaVoraVpyd0RRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-106.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQVBUN05jODQ3L2V4VHVKNnpjWkk2b2d3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05ESXlNVGd6T0RJMldoY05Namd3TkRJeE1UZ3pPREkyV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRFd05pNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFRb1M3Q1FSUDRIMkgrOApmQkVETXhuUTFsWURzMDc1ODhLZnhPazE4cXpqaU9Lb0g5anM5Tit6MGxHQXFaTjYxTzF6ZERIWlFxMDZuL1lVClR5QjA0NFU0bzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUFtd2FyNm9oTnp4VFU2ME1xUGNrN1BIV1h1cwpNd09lVHFZOUd3bzh2aTJReE9TVnFCV2pxS2pkNnVtWCtrZFRvMStWWUlnYThpdUNYTWJLdTFVWFF0Y3dMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE16VXRNVEEyTG1Wak1pNXBiblJsY201aGJJY0VDZ0NIYWpBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFBMlJ2bDFnNTJzMS9qUGQzTW9QRE5mZ2dQdGZmSUxnbytwOVdya3haeUlMbApnVWNxcXFkcnhKekpielZJTkg4ZXVFS1BPSHB3a0JTZjAxc2FBQWE0QVY3QnFaNmozSGovczZQdGFzbm41Y1RvCmdyT21Wa3lXRDBHdkZ0aWdLbUZrdm1zVW51blczTmJ5eUl0cG1ra1U0NFFMQ09jVjlxN3EwNGpQbDlmemlUMzEKWlZBZVNNL2I0NUE1aEZxdmFhN2dBUkprTGZXZ0YzZXV6UURhWVNRNlZNUGx2NVBlQmR0NU1PT3VnUDlUc1c5UgpzQ0ZVWDI5aVZHQ21nKzBMY0tYYTdPNHp3aDYzMHJxQ3dyTmJTUVR4VVFFN3JhYU8reXF6dnRPQkFtNnA4WUxsCkNqTVQ4L1hqVW1SOTFvS0d4QUk5YXgxNVRQSFJ2Uk9KOFh2d283WVBiZz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-04-22T18:43:26Z" lastUpdateTime: "2026-04-22T18:43:26Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved