--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-05T20:27:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-05T20:27:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-05T20:27:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-05T20:27:40Z" name: csr-nkpzp resourceVersion: "5927" uid: 6ecae1cb-d996-44cb-88f9-5ca114d23ba5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6f287630ba2c9dc9d05dad4ae8d49405f104de41604ffb145db0ea3da8058fe5 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlFqQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRrNExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkR1MFlvUGZCWUdEK3lKaUFJMURxYjlXZjJMdHlXVENMWk9zUkJxaXI5VVoKdm1hbTZNUjRNSFNkRWhSbWtkbmVNZDZIckdaMDJwTmNPU29tNUF1VlhCR2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXpMVGs0TG1Wak1pNXBiblJsY201aGJJY0VDZ0NGCllqQUtCZ2dxaGtqT1BRUURBZ05IQURCRUFpQTVJbTFGZmNHNUFVeXJaTEl6ZlNiUk1GRkZaYzE0NjNzbUszR28KTS9tWjhnSWdKaHRyWmxIV0Z0Um05eVV6VFJxcVNPNStYY1Ewbk5hdDB2NlYyWHRGaEtNPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-98.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-05T20:27:40Z" lastUpdateTime: "2026-07-05T20:27:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved