--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T13:53:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T13:53:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T13:53:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T13:53:01Z" name: csr-wsr28 resourceVersion: "5380" uid: e485bd5f-12c3-4a72-b9d1-7071e88549ba spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1c5a8b506b63f8e4737f06ba48e96fe3f0403b6add9f31345104b5ac7cbf8518 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlFqQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRRMExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk1YU1hZYWt6Y0I0UW83Qjlpb1Urb21DNUVCVng5VzVndUZ5UmtsampnWEEKM3RWRTcrdkdoemdwMEUxbkhWTk5ycEdQU2oxUzVvYUlYNmgyUDN4R2lyR2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UUXdMVFEwTG1Wak1pNXBiblJsY201aGJJY0VDZ0NNCkxEQUtCZ2dxaGtqT1BRUURBZ05IQURCRUFpQXJ4UXBTZjRvYjlHYmJiWHlDdlJBZ1JLcFJJSjByNGVYN0NmV3IKWktPVWhBSWdKYnc2bU5PbytGejk1REpiS0pGemp6enF6dlZWTkUzZ29lYThoY01KbjM0PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-44.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T13:53:01Z" lastUpdateTime: "2026-10-30T13:53:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved