--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-05T13:18:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-05T13:18:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-05T13:18:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-05T13:18:18Z" name: csr-2znm5 resourceVersion: "5984" uid: bc80011d-1242-4828-93a5-5dcdc7d0d6f1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=30ec2d6827056f2ad898feff7b02e0890491ede15946985d56b136cc375bb7f4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-22.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQUs4U2pMM3lDTnpzZzFtZEN6SjAxS0l3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTFNVE14TXpFNFdoY05Namd3TnpBME1UTXhNekU0V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRJeUxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkM3dmNNcTdORmJwcm9hWQo0bmN4a05NOGh2eXczZHAwVnBvM3NQQ0tuZFd4U0drNVNRdG0rektHaHJ1K1VHU2V3RlYvdng4UlVwYk5GQ3N4CjIxcFd1V3VqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBcUE2ZHhyM3JuOUZsTFQ4U1BISFZaOWNZQllsbQphZjdkKzRTR3ZRZStyQUlzdWE5VXFnanlZU1FDeEJ2YnNqbFFtby9RMUc2Sm9UU0hrRXprN1hvZmR6QXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFeU9TMHlNaTVsWXpJdWFXNTBaWEp1WVd5SEJBb0FnUll3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFDcTIxaXhobDI0Um0zNC95amVJM3RWTlhsZy83TUQ1UkhJd1c2WXBCeTFETmF1cQpZM1dya0E4M1ZUREtoM0ZzdmpESTRxR2hJRFgxYVBrRXdWczhFQ2dvajFvbWYvNTRVbnZCZlBSNGRQV3lxb0ViCkhOUnNRbEpOWXpIU2laQWhaYmVTVFpDeE1KdFg1NG5mOW9BL2FEQlZRa1ZTYkRxUWFKTWFuZzkzRkNWTmh3VGYKK2I0aUUydk80UkJPNlRDQ3NRU3FoMTRkb011WWJHNStNZVVYNFpPYzNTYXNnS3pEMy8yOGczNlRPK0JHVGhxWgp2c01NRC96RlVVZFJJUUZ2c2R4cCtBaGJjUTY0bk03d3QyRDNiSDBIYjh0UHBibXNCU2NESXJuc0s4VDY2RCtKCmxKQjFETEdvRmE5VkxQZnR3ampIRzJjbElYTEN4RzhkSnZYVWVuUT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-05T13:18:18Z" lastUpdateTime: "2026-07-05T13:18:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved