--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T12:01:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T12:01:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T12:01:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T12:01:52Z" name: csr-9vcp2 resourceVersion: "5683" uid: 9890cae5-016b-4908-bbc8-5b142d4d518f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f4fa5e18e912872461739556a9b8ebc79b65751d5937c1813b33c35778a68b5e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-89.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQUs0TGg4eERSMjNtdFpJOElnQndjUXN3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTRNVEUxTmpVeVdoY05Namd3TnpBM01URTFOalV5V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRnNUxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk4zVUtUWWxXQ090NlVwOQpVTXpZNFVUYkhlS3lqd0lHNFFsU0RzQ2lUL3pRd1BSMzRhUDdxZllzcHROSzNhd0lCZTRFNzVTQUZqV2tGNC9lCkVUUmRVaEdqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBMjdFMTk2RlpQbG1uMllZVFBpSVd4RVZCcmYwdApaUEh5TDNybGtPdnBxY0tQaWRPYTRCM2RxeWQreG1DMk45d2dtSUhZWlYxYUI5dFE2eU1BZW9XL2hEQXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFek9DMDRPUzVsWXpJdWFXNTBaWEp1WVd5SEJBb0FpbGt3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFETndObkVST200bjVmN2ExNm9Zd1ZxSWp0RmEySUpGUmJhQkpUQVdUbVA4R0pObApxNHdIbFFRdjFGa1NZZUNHMzBnZytuaFZlVHl2U0JBdlYvVVkxays3M0pTZ3VPZHlYNUZic1MrZkVkRFpvb1ZZCm0xdS83NFJkSVROVjF0SzV2bS9jbTNldWhjanVWOHhzVDU2dzJRa3cvNnlUWGxwK3RnaXZHbE1hdTZWalZJcEsKNHovWWFVM1lWUklvbFV6dVNTM3JFTjlYOENqbnhCOUJabTJOeG9pT0trbHozOXVYamt0elVNdzcwY2M2dDBzMApPa2Q0S1hCVmdNQnRiMmJhc1huRUhaZXd3VjJkdkVWNTNtZW9PU3JCWUJadCtZSDZGblNLaGo5N1V3WThFdC81CktGVWc3aFJoTHp2blFTdmVoZEdBREZSa0pwZklPRnhpV3MxYk4xST0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-08T12:01:52Z" lastUpdateTime: "2026-07-08T12:01:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved