--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T13:47:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T13:47:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-30T13:47:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-30T13:47:12Z" name: csr-dg7cz resourceVersion: "5991" uid: f29e27f1-7639-4b70-8b9c-143a293c2149 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7011927bc806c5ecbba42807c9aa3b1c94a0cd287410583639c67aaf302af28f groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRrMkxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk9MaElSZ1RuOXhnVmYyVG81cGFON3grYWtaUkhjRWI1ZHYrNGM0WU5yK1IKdEdxNDc2Mmk2NHczRzhWanNzTldLd0lHLzdERUdPZzVkcERIUmdxWU9uK2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXpMVGsyTG1Wak1pNXBiblJsY201aGJJY0VDZ0NGCllEQUtCZ2dxaGtqT1BRUURBZ05KQURCR0FpRUF0S3pYaHp6eUZBblJmT3l5TWlweEZXUmhWWWF1N2YxMEpQNWcKa2ZyVlRrVUNJUUR0a3Q3MThaRXEwdGovNnpDRlp6WkZZQ20vOGhmbC8wSVUvMnN2MnhMc1hBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-96.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2RENDQWRDZ0F3SUJBZ0lRZjhZUHBSOUpWOEZ3R01SV25jRzNCREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM016QXhNelF5TVRKYUZ3MHlPREEzTWpreE16UXlNVEphTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNek10T1RZdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNHVFaEdCT2YzR0JWL1pPagptbG8zdkg1cVJsRWR3UnZsMi83aHpoZzJ2NUcwYXJqdnJhTHJqRGNieFdPeXcxWXJBZ2Ivc01RWTZEbDJrTWRHCkNwZzZmNk9Cc1RDQnJqQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJjRDRaQUVaTVJzVjlsa25tdnJNaGEzOGlnSERkagp3TmU1d2hjU3NsUWxXRkRyMnBIQS9RVnlxaVNTcWxac1pRZnFqVmRWL3A3ajExazhxRHRxbmdHbk1Dd0dBMVVkCkVRUWxNQ09DRzJsd0xURXdMVEF0TVRNekxUazJMbVZqTWk1cGJuUmxjbTVoYkljRUNnQ0ZZREFOQmdrcWhraUcKOXcwQkFRc0ZBQU9DQVFFQVB1TmtGQjFEVWc3bjcweU51YVBGb3hlMWE0cSsyTDE3TUFPNmJ3c3d5RXBueXBQdAoxY3RQYWMwSG9DMUZxVmx1NTdPZzRGaURaMlA2UVhNOWYvcEh2bThQU0Y3TUh2WmswMnJIdEJiMGxGVXdBaTUwClJiN3VNNTFiM1JDaHM0bFVCV0w1Y3JEd0cybWxXd0JtTnlEbjRWdW9keU8yZG5VaFJ3MGQyUlhUbmpacCtwcS8KM2xvdHZYamVJSFhuR2xxL2FpNm5vNGVJOUFDQ1kyWDVDZnhCSGZzckpCN0JGQlFkN0VScmhUUWVTc1AxUHQxSQppS1RhUit6VGNONXhGTDh5SVF4OGJ3SXJUMzBCbTFSTHkrcGN0bmNSZ0srbllad082TmpwV1pMRk5HTGpqSzVICm1iL1lXeU81K24wb2JqbWNXRDJzaWExVFdLVVFWRVdXNGJvVjN3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-07-30T13:47:12Z" lastUpdateTime: "2026-07-30T13:47:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved