--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T09:30:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T09:30:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T09:30:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T09:30:49Z" name: csr-88n58 resourceVersion: "5995" uid: 9e391ab9-8a93-4519-98a7-d0e0fe8dcfca spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2763b1d6c875376f856426a33c6604dec66ff6e9d6cdd2675ddd87c967c82141 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-204.ec2.internal status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2ekNDQWRPZ0F3SUJBZ0lSQUppOHJ1Y1lxaEpNNEVMMTZ5YjdvQ1F3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056TXhNRGt5TlRRNVdoY05Namd3TnpNd01Ea3lOVFE1V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRJd05DNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFRVk9yeXRkZ3krMEIxdwpHaWRjYVBhNWtEaStOU1hCZVFFQlpOZjFyYUEvbDBvbmZzM0ExUU1BWmg4U0pLbFJkdEp3WDBvZG9EN3dXMG9LCmR5MDlWWE1KbzRHeU1JR3ZNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQVRBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUdsbmZqUUQyaXJHd3lxN1JuYnNBMFBSZDdFdwpJYUJXd0h4R0lQaFlpWExST3pES1lQeGlaRlhDM2hmR05DbFZVaDVZVnovSExudVozcU5TbmJpWlR3b3dMUVlEClZSMFJCQ1l3SklJY2FYQXRNVEF0TUMweE1qZ3RNakEwTG1Wak1pNXBiblJsY201aGJJY0VDZ0NBekRBTkJna3EKaGtpRzl3MEJBUXNGQUFPQ0FRRUFhaCs5OTNRelBiV0VNZzlJdnZ0bXZ5UFM3QzgwQ2FpR2x2YTFqajZIR2x0UgpZWHZEVGxOdjhvOExxUEJkby9BK2lwT3FmemFhUk9IMW1NekExeklUU1NUa0JWeHNSN3RGZWN5Q01JQ2NqNzlyCjlvTkJWamdtV0NmK1FwTVg0VUx2YTdEVkNUcytNTmFlSXRxUWZwSjdUVmtxRHovRVd4WC90YnNDTGd4WGw5bngKcHQrK0RvNDBDT2h1VFR1aFBvZ0NidXN5dUtvQy9ZRlUzU1VMVkZYR09EN0k0TEZCK3Nic1pMV3B1TnRWSmc2awptOXZmVElDYjBrK2Ewb2lTblBmRHZvYU9VVHVDNGthbWEzaHRLVjZYSjNjTnNVZ1oxMzlHM2oza3pUWjhHT21BCmJ5MlV2N2lWWDlOZU9wZksxZkJPYmpGd3dITEdaZG9nSnU0RllZSnQ0dz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-31T09:30:49Z" lastUpdateTime: "2026-07-31T09:30:49Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved