--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T18:30:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T18:30:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-16T18:30:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-16T18:30:01Z" name: csr-bmsqh resourceVersion: "5556" uid: 61ebbcb2-e8b1-4428-95f0-3b8720c430b0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c4ddc4c9b863610e388c50884ca5ce921b600892b6b0906cf2e528a0718cba41 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJUQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRFMk5pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTL2tDcHA3YVdNOXFuODVVVzhGdGcvaWw0TlJFcVRoSVdEc2RxK2NreUYKc0kxRnZHQXZVcFBiWDRQK2lLWHgwVkhnQW5obVVMZzU1aFJvbzNmdkVJdStvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXlPUzB4TmpZdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJR21NQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJUUM3ajlSRW1RUjg2dDdObmZzSGc3b0JudVJTRHdlVkpZaW0KWXY2MHRKakNUQUlnQldEc0lscEJBcGdRNDdlN1VqVy9lWU11aHhuVWFUQ0wvbVZ2MW1lQUIvWT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-166.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T18:30:01Z" lastUpdateTime: "2026-04-16T18:30:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved