--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T10:44:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T10:44:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-10T10:44:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-10T10:44:43Z" name: csr-447n6 resourceVersion: "6406" uid: 466300b5-0462-4e5e-8741-8488f16b6f74 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6cc22ed9e62e8f2cda9f5253c43cbf9cf4628c2dc33d3e963f06406be6224ed4 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJUQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRFME15NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSemNyMkdlZTdCZUVsTFpmQWd6K01kR292b2FMZWtBenVjTU5vVUhTNGIKeXdLSDhlVi95Q0JlWXZ3NHBGTWFYNmdKNytNMFphamg5d1Y5ajdvYUxLSGZvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNQzB4TkRNdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJeVBNQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJUUNmOHIxU05sUkhnUW9tOTdGM1VKdGRwUWw3QmNQQlhvK0cKQjdHMjc0WGRZQUlnU2l5UFhtd0dBMHp0S0pyLzlLS0NCcm1jM1ZMcEoxTTM5MUM0VjJ1V0RGTT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-143.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-10T10:44:43Z" lastUpdateTime: "2026-06-10T10:44:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved