---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-09T06:38:25Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-09T06:38:25Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-09-09T06:38:25Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-09-09T06:38:25Z"
  name: csr-pk6h9
  resourceVersion: "6214"
  uid: eb3d47da-79d3-4c7a-9dfb-3bcd5ba7db76
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=575410e7184dbaa84283ec4914dfe151fdde14098330b26d1b10df0763082a52
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kubelet-serving
  usages:
  - digital signature
  - server auth
  username: system:node:ip-10-0-143-239.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-09-09T06:38:25Z"
    lastUpdateTime: "2026-09-09T06:38:25Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved