--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T21:57:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T21:57:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-08T21:57:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-08T21:57:20Z" name: csr-pzt7j resourceVersion: "6014" uid: e2d1442b-217c-4bd3-ad85-9e4e12ea0be1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2508aa44a356c52dc15182c24ddbc48f51886028621e2abaa90d5889928c4c1e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-67.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRWld6cUFJZjJ3Y0dFcHcyUjlQSTFHREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1EZ3lNVFV5TWpCYUZ3MHlPREEyTURjeU1UVXlNakJhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNamt0TmpjdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFSlhzTFdVMEhsNlZSNVYyQQp2VUFzalRVZFRBajlUcnZLdDlrZCtLb1ViMDBqWGFiNnBiN1phTjhSZnRHM2Voc3ZaaWsrWjN0cGY5NTVFK1B0CnhER3BIYU9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNLOExicEdreCtmRStZUFNjMi82c21MMzB0Q3U5QQp2bVpOZW1nbWlnSVRMdjljMlppQ3pBUnFTNmJnN01xWitSRWp4OHk5TXd3Ty96aFVTaE5JQ1Y4ak1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRJNUxUWTNMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ0JRekFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQURtL29OOCt1YkFMQlBLNmpVTjVzTk9NWnFtQURLeW9vYUx1KzMzSnZYbEx2ZFBLMApZL21iRXMzbElxQUZJY05aZXpvL05EMXpSK2taTVFsbGsrNGk4dmxDRWF3RUZETHk2UUpjSlQ2ZnA3NUNUSW9YCjNmN1Qrd1MyeHJST0hFOE9xTGxsM1RndWxsSU5vUm9DcXJFOSs1a09vdGRBWnk2aDFueFJGWWllVUlKZ1l5QVkKM245NU9qVDF1UXMrWStjblhoQ0xVWGp1Sm1heVpWM0JzaGlLbnFoMGFMRDVwWGZKRDNMTWlncEx5WWdKcnZRWApYOHNuZUI4Y1cwbSsvV29RcFhJcmRpb01KV2g2MjV6MXNKNVd3T0diZDNjRFJRMmtoR05aN3BtVEFqNUtFUVY1CjF3MFdkZzlPbHQyWUlrazRlRDdEVXUrdS85Qkh2UktDUURnYXVBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-08T21:57:20Z" lastUpdateTime: "2026-06-08T21:57:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved