--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T21:29:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T21:29:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-03T21:29:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-03T21:29:17Z" name: csr-7glkt resourceVersion: "5343" uid: a14fba0f-7a62-476a-a12f-cad8677a1ba9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fe3fe27ba88067f55cfbdce8f5e0cfd0599c405d96cb58e7abed26294aadf504 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRFM05DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUWml0RmE5WTE5MVE3L2w2V2xrZDRKdXlacXd0NFRWbmlib0ZIeUNXU1cKWkcvNzErSGVGeWw3T3pFVFZ1V21jTjZVcWtiQUlaSUVrNW9QLzltODFLVDRvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNaTB4TnpRdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJNnVNQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJR0lIdHA3ZXBrSlZLYnl2aW1mNG5OZnVUeGFVVCtpak83VTUKeGd0dXErbVRBaUFXNmt6eUZWRHF0VXNwdUNjZ1hLVStqVHZhVGFNRmlpb3hPYjZKREpTQU53PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-174.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T21:29:17Z" lastUpdateTime: "2026-11-03T21:29:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved