--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T16:56:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T16:56:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-07T16:56:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-07T16:56:31Z" name: csr-qg9rv resourceVersion: "6117" uid: 40b89b55-0eb8-48b0-8c8b-c924bf5fd258 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8b87ffd2713b72f0c1b4b32b6719d62d5f4bdf5837d0ecaa1e258e52589bbd04 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-63.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQVAwdmkxdjU5Uzk4SlcxcmRrbHBCNlF3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09UQTNNVFkxTVRNeFdoY05Namd3T1RBMk1UWTFNVE14V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRZekxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkd5MVlIb29YL055L3RJegpMYk10bGtMV09salQ4cnRzQ28zR1FFNGkweStNT0RKQWZoOU5jeitaSHBJQWx0blZpeUFHVENFRkFHNEJTTWRVCmpsWVVGbDJqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBejRLQml3cFpTVjRURTFjRmRwTTY4NnlTd08yUApndDVKQ0FlT1NlRXZEdTlmMFhLZTduL2h4Z0lyaFQ1Tm1lWlNSTGg0RzNRQXVmSFoyaXhWdXVBREZqQXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFeU9DMDJNeTVsWXpJdWFXNTBaWEp1WVd5SEJBb0FnRDh3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFMUTVpVVl4UWhxcjR0RjZrR2VFNWIxYkd4UFp3L3k3cGZKUG95L2VmV1NHdFV3VQpsVHc2VllZNjNJWDBrZVRNc3I1aWJsRGI5enpPOTNOdEZYS09rcUhNRUpKWXZIRG9Cak1wWk9pUy9DS2RRcHk2ClhjcmJjMldlOEtlQzdWQ3RRRk5rQnRhL3hLeityKzlJb2dtVWhrOEc2S0w4Q3l0L1IrNTVxRzZRTzhHcTR0T3gKaytrdGVXQTIzSjFYL2V3YXFDTndzU3AzK2hnSWNPUXA2NXVzQWNrU3o4M2RIYzZVZXl2ZURadlZrdzE5V2l6VQpUMW94Ukt5cm5KbkxiZ1hUek1qL2lGMFBkbUNrQXFQTDF1WUo4Y0Q0WUdud1lOTERnYUdjeDdLTHl2NTJWdk5ZClhydHF5K0RNUzQ5dEIwVlhWYzVtaVgzOXg1aE9CTkhDQ3JPS0xTQT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-07T16:56:31Z" lastUpdateTime: "2026-09-07T16:56:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved