--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T15:21:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T15:21:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T15:21:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T15:21:18Z" name: csr-ljg5v resourceVersion: "6521" uid: 0727c839-136f-405a-bb77-aab4521b861e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dfc2bdc8e740d36799457188f249ceab80f8b17d0ff7478779a784c8eb2a39ed groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJqQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0yTFRJeE1DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRRnZiMjFzZkI0cXJCcVBZZnViR3lhRWxIaHRqb1dyZld2VnAvaTVpSWYKL0MrTHhiL3gxS2w0NDFINU9QaHQyUXBQZEZTYXkzdEt6dDV3YityQmZlcVlvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpOaTB5TVRBdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJalNNQW9HQ0NxR1NNNDlCQU1DQTBrQU1FWUNJUUNxWTAvOUJPOGdHVm9XWG1VZTY3VzFZUXFrWWt2S0s4T1EKT2hnaUJJRm8vQUloQUpZRk1jbG9UYjJDNllvUjV6NnZ6Nm1RWURhNEtPODZmY0pMYzFOelU1VHUKLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-210.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRSHRsWDNhdnNkSkNhTlhxSnA3WFd6ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UUXhOVEUyTVRoYUZ3MHlPREEzTVRNeE5URTJNVGhhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNell0TWpFd0xtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkFXOXZiV3g4SGlxc0dvOQpoKzVzYkpvU1VlRzJPaGF0OWE5V24rTG1JaC84TDR2RnYvSFVxWGpqVWZrNCtHM1pDazkwVkpyTGUwck8zbkJ2CjZzRjk2cGlqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBc3VyTmloYVVmWlB6TVZLSHVaZ3Y2TnRwZFI1eQpZdzZhVjVZemJqQ3VydGxNSmgybmpOcGlqY25vN1NoZ01YZDZEWVpkZDVZOFR6NWZOZUk4Y3JBdXh6QXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFek5pMHlNVEF1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSWpTTUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQXRaOWk0dUVKMVIxdENsSm9yRkdzVUJ4ZlhkcGovbU92RWxkaENML0NNNURmYwo4ZVV6blNuKzZxdGFBNzVIODdsZnhzaFM4WWw5aW10VWRFbWN2MGI5c01FMXlKbWpvQ3NYdVdFWVhldk8rYjlQCnI2aGMzeGN4cEpXRStIeDNoQ0pjNEF5c1UzVzJLK0tFYVFsUGRuMVRmSHdYY2hFQW01ZS95TG5NUzVXRzVwMUEKS0Y2bmp1TTJGV3FPZFo2bVVRaFN2dVV5NVBOQVk1UnY1UWVrcmQycm1ObVNtbWtqRzVvNXg1MlFvdEZhL3dUSQpCazlETlFmdUllUFZsWXNteWFCNzN6TlkzNUt1am9Db0RvOE5wdVNraVFNV2NpY2xUYlN2cmk3bnlQWFlXdEhuCmJxZmo2NXJGd0xrZzI5alJpTCttNFlBclZDN250TS80RStCUmZHcEcKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-14T15:21:18Z" lastUpdateTime: "2026-07-14T15:21:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved