--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-04T23:57:08Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-04T23:57:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-04T23:57:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-04T23:57:08Z" name: csr-pgh6w resourceVersion: "6498" uid: 935f807c-ee0a-4f23-bbfb-1e505f74a6e3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f2f5a150ecb0c54cd79323b2f1ccdc9c7cbc08402f37ce78405bd2cc7fd1fe18 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-45.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lSQU5PamFTTzFuTWNxNmdTRUxMa3ZXaWt3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qQTBNak0xTWpBNFdoY05Namd3TmpBek1qTTFNakE0V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRRMUxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk05VWRNZSttejIwZGp2WgpPRy9nUFlSWjlZTzl1Ym1Vc1Jza1hXWTVtelErN1NucWJtYlpkUXdmQnVKcncrS3hGK01pbGJCRUc4VHhWVDk0ClpEdG5nMktqZ2JFd2dhNHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBU1JuaGNoZEF3emNPS3Z1N2RnYXlUcmxDRGpscAptZm1xayswcTZ0dDBhRGk5ZUhHa01YMWlsTHpoaHRDeGhpNGQyYytzbUk4QnFFbTdmelV3N3A5ZVNUQXNCZ05WCkhSRUVKVEFqZ2h0cGNDMHhNQzB3TFRFME1pMDBOUzVsWXpJdWFXNTBaWEp1WVd5SEJBb0FqaTB3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFGSnpsKy92NlJPSDd5TE4xWjJJZmw1OWg1dkFjQjQzOUZXVWlHYTRKanI4Zkc4QwpFc0hoRmxZWEc3U1Z2QXhBUTlKZFEraTFhL3BzUkJ5aWs2WjJha3dVdUk0bWRydVpGVVVFTUl4SG9vb0tEaGowCmpoS2tMZTlrSWlkbnJGdE1xOE1QdllBRlJmaTlkaUtBV0QvK2lBTTZheVlScUFKNExPSkNUTmEyb0gzcGRlWlkKWTZuVWR3NjVRcGJRK0xsUVF2c21RU1R2RDFVaWp2UWR0RFVpdDcyR3pZMGFlcm1hR3FlTUcvWjBFVXZ5V3hvLwpqTEZKL1U5dnlMc2NzTlczUHF1bkI1Z0Ixei9lanNYQVVnRVIzbzJBTmVLUEVuazZHV3dmNk1LRklnbmg5OUVlCi82elZZK3pOSXh1TW9kK0JsVElSTHRhWUx5ZVFMZk0vbW1LNGRIZz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-06-04T23:57:08Z" lastUpdateTime: "2026-06-04T23:57:08Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved