--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T13:42:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T13:42:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-25T13:42:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-25T13:42:11Z" name: csr-m87fl resourceVersion: "5688" uid: 88436629-a765-48bb-adcc-689433a96e60 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f46547caebc1e60069f669c70c93d81d038c4646e290a78086cc395376feb727 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-255.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQU1JTnFuZlI1bFZsRXJvSStIRERHSWt3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05USTFNVE16TnpFeFdoY05Namd3TlRJME1UTXpOekV4V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRJMU5TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSZ3J2KzRhdVFxVVVqcgpZMnkyVVlFWGRIZW1GNnVYR3d0dStMdlMvdFZvbXdnMXFybFJnQkNBODQvMUEwRzFqZHNkNE0rYkNiTEtJVjhNCm5QcFhLV3NObzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUpPZFRETHVGbDRrYzl1L3Q0RHlqQWVobVRiVgppVWFvMU1aSzgzNlRPVnNlbldHRTVMS1Jqb21OekV1Z24wUFBYeGlXZ2RIZHQ0L3NROXdqRmpaSXJiSXdMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE5ERXRNalUxTG1Wak1pNXBiblJsY201aGJJY0VDZ0NOL3pBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFhNWNsVTNYaXBwQzhNU2oxbURyQ25DK1RPempwSzRhbmw3OStvbHorQ21jRgovL1kzQTJRYm53ZGZ6QW5xS3lkcXp1cXQ1aE9ZWTMxNGU5ZElsOTU4emYxWmk1enprV1RpSjRLc0NEeDI2SkFXCkxuQlJoYkNkcnFQRGY5MnBJakhJem53eDMxVWtSUDF2VmFFTjhYWDJUUFRMY2RMR2ovQ0RpRjQ5Rll6b2t1TXAKUkp5Nkg5NXNESjIzSFFQbExOZ1dtazVGcUg4MjQ3V0ZpWE9qTXFrUjB5Mm5UYkpJK2drQWNMR0daTDBrRy9OVQp3bGpWWDh6YVlhZXhHTTJJWnRjbzZPak9POWk1a2RTM3RsNnhldXZBMk9OSzhtQjRQc3lTdFU0Z0lQRGJpdUdYClExd21HK1FRRzNkaUcyU0hHTVI3QmVsSlYzRHRmTWtqa0w2NU43bWdyQT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-05-25T13:42:11Z" lastUpdateTime: "2026-05-25T13:42:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved