--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T09:31:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T09:31:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-28T09:31:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-28T09:31:29Z" name: csr-fcch7 resourceVersion: "5353" uid: a6dfac02-4741-4bfa-848b-d1d4d3c21da0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fc0eb0908cb13793473e40a67a1f2807311e1cfbdff30b5ccc3987cdbc632d47 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRRNUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkMwOEl5alZYbDNZWUNBemlUak5iYVZvMld2dDB3T1A1cjA0SE9oRjZUTnEKWlBzaE5weXFpbUh2dTJGWFczc3lwV2dhTkJSeFlyenRBY1VTZEhib2dyZWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTTRMVFE1TG1Wak1pNXBiblJsY201aGJJY0VDZ0NLCk1UQUtCZ2dxaGtqT1BRUURBZ05KQURCR0FpRUErNWpiTCtYM1hMSDU0T1l2WlNJRXljbjRjUGlyUERXR0RzOTQKMXBiMC9mVUNJUUM1dis2b2ZsWVNPb0N3SHg0RHFnbEV5TzlyOXY1dWhqOGZtR2Z2Y0dKQnJ3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-49.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-28T09:31:29Z" lastUpdateTime: "2026-05-28T09:31:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved