--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T14:51:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T14:51:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T14:51:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T14:51:20Z" name: csr-xsb2b resourceVersion: "4828" uid: 9169f34f-5b6a-4a53-90bb-dc28ac8f9a0a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2adc04d7894269b519a17cd46566d82d89a3bdc4f0d656e721c63fdd948c05bc groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJUQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRJeE5pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTK3JEMlo0Zkcyc2tpTW9OcDk1aHZMd1g5SHpDa2k2OThWc2w3eEZSR20KeFFQNFl1S3d6Ulk4Y0RhOXRpRVhnc29QTjI3RlpZM1IwN3R5N29DTVpLU2tvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpNeTB5TVRZdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJWFlNQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJRjAwRGZDZ0pJaW9sZ01lZHI1cnc5OWVaczV5TFlsbHJpbWsKaGQyZnd3MExBaUVBejF0aXhPRmVjNlV0a2JsUUJuc0dtWE5qKzJqLzJxL3ZQR1JZWkhBbzZvRT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-216.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T14:51:20Z" lastUpdateTime: "2026-10-30T14:51:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved