--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T15:15:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T15:15:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T15:15:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T15:15:49Z" name: csr-6w6sk resourceVersion: "6095" uid: fa41edd7-eabb-40e5-9613-0a00e400a8b3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=06d36e5038268a7271db659f0694ac9ba535bcab8f0a693492e032d5babf8d90 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-37.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQUxqbndheHR0SEZzNWc4Sk4vbkcwVk13RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URXdNVFV4TURRNVdoY05Namd3T1RBNU1UVXhNRFE1V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRNM0xtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkI1cnhWd2lRRko5RUNieQpwVmplVUdReVZkUUd4REZpcmk3V2ZxOFQzSEdub2EwTWZzQ0tSSS9rMjYyY0FrOW5yU3lremhvY3UweWNjYkVHCm9YUTFlTytqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBeDVCSFphZEhJR3FvWG0zcjcvUDFMRGJJQ2dUbQo2ejd0cUR5dHJ6Vk9YOS9xYVhtd1hJRzBKN3kyZmpvdnBWRCt3RXF2czJkK2RpMG5lYU1KN0d6TVJEQXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFME1pMHpOeTVsWXpJdWFXNTBaWEp1WVd5SEJBb0FqaVV3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFEMXN3T0tlNFM2N0d4cGZUZE1iSUROSUxyMG5aNE1FMk5hdUpmNS84QWxPTXNUTwphR2tkUm1PdHExMEs2TnRCdUIyVWl0K0I5bEdrbjRuaTdzUjB1dzlsY0tPVklhdWlwY3E0WHJzczR4WmllcC85ClJSdzJ3cDk4ZHd1bjFyUnRyNWtTQnN1R3RnNGtHcEZYQkRodkhxWHI5OEc0azJLK2FHQUlzK0dJRHlMK3JUMDQKZTE0Sk02dGhDYkpBZUtTTkJUVllDcTdXWVdwdGJWbWphalVTWCsybWhBYjdpMDRSbXo4bUZyRVR6Ump5aG9sUQpPUlRXbSt3WTlXYU5yeTdUamFGaW93b1RxSFBzc0k1Rm9xOWNpSWx4b1hjNmE4VUYwckxZejAybmJ5cHprTjErCkxnUGhjcG5DbmYyN1RxU2NTVDFIOXJLVjNhQ1FZTWZOMUZqcDk5QT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-10T15:15:49Z" lastUpdateTime: "2026-09-10T15:15:49Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved