--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T12:02:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T12:02:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T12:02:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T12:02:26Z" name: csr-jvzqp resourceVersion: "7196" uid: 0daacf09-72c2-483e-b435-3a644ac7f931 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=183e67572a8116a387f9c7028f617b145c78189f3784bf02725a6dee34e7b1ee groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRFek9TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUWHUxTG0xdG92enNiNEpnRnVkajVkNFlNOHgrQTFIbitCZjFNM21Vd2cKcFNXamNtUngxVWlIRjFCSzlNaklKejJOUFRPTTk5WkJ0ZHR1RzM5WGhIc0NvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNeTB4TXprdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJK0xNQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRktUZ1A3Ri96R21NZUJ1Z3FaZTFsUStReXBLelhOT3ltbkoKVkFFYXJzWC9BaUIyTnM1SW9TbUo4cFA3WENJNzlVVnljOEZKVUhLOHB5b3JtTU9XbXJLVEhnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-139.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T12:02:26Z" lastUpdateTime: "2026-09-09T12:02:26Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved