--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T12:45:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T12:45:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T12:45:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T12:45:42Z" name: csr-hrs5x resourceVersion: "6146" uid: d2b57ceb-2154-465a-be0e-865eed7dd8dd spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7276cd7426b6fd9c25c13c012a41eb84b8792caf35d853e238c6c846fa316503 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-146.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2akNDQWRLZ0F3SUJBZ0lRVzNqZDhVSHd4cEdFMnBvMzNZRmVzREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXhNalF3TkRKYUZ3MHlPREE1TURreE1qUXdOREphTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemt0TVRRMkxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk82M0lDNEZLZHNEV0FQTQpLMjVGb3FXOXZkaStjMmtKbUdteWlRZGMxWlJMcGdqZzNEK2tUUit2TkhuTm9ZVmJMVUZnbS94K3hicTFKQ3dHCjhuOW5yUnlqZ2JJd2dhOHdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUIKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBMmlHWStGeUVYRi9rSE9lVnpqZE8yM1psWEVxegozOXVnNS9WckR4amdjc016NERXVXREMGpEdHZsdjNCb2gveXg1aU9LMXVEakU4NWtNL1VhdVBSMWZEQXRCZ05WCkhSRUVKakFrZ2h4cGNDMHhNQzB3TFRFek9TMHhORFl1WldNeUxtbHVkR1Z5Ym1Gc2h3UUtBSXVTTUEwR0NTcUcKU0liM0RRRUJDd1VBQTRJQkFRQlNBQ3o0QWlUMEJaTHRDZHo1NXV2eVlrNGNONC9ITjliaysrTVVtYTlpYmY1NAo4WGtrSHArcnM0aDJqMk82RjU3UFRBOTduQjBrOEhuempYNURMTHFYU1JYUEh2aHFNTWQ0ZkFlTmpKczZURk1GCndKcURGSGd0YUJWV20ybVJRSmNxWmhzNXlabE4vQWk1ZmFCdVY0ZDFjTnNJdWRuRENxZEZzMmJiZHdBcGkySU0KTVFjUTQ1T3oycWZUY0M0YU83U3VyTkhTTE5tTFFhd3MyYy8rZkZoWGIyK2tnTGorWERjQVBLRVRJMkJjQVhHaQpSdkFnckZzekdTSCt5Um9RaDRNYzh0aXVKNnYyakpSUzFQaGloNitxSnovaklpQlY0Z240Z3lYL1RWVHRFSFF4CmF4R0twTDhESkxXZFRLVG1OSzNLeThQS21yMXU3ZXl1SmFuTXBSUFoKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-10T12:45:42Z" lastUpdateTime: "2026-09-10T12:45:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved