--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-24T19:06:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-24T19:06:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-24T19:06:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-24T19:06:42Z" name: csr-rwtzc resourceVersion: "5683" uid: 6909aeac-52ed-4e53-9bfe-bd53e8032dec spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4e31e30b095668f9a52bedcb2896b9a967547a8399d23a4a72121bca9ef0aa54 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlFqQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRJekxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkRzZmljMk8zOVIzakxFaXBrNDdDVWpZYSt4OWZDTFVoMzlDNTl1QkQrRXYKUnpldEgxeTZkNnJsU2FDV0w0bXZJdFdiYzlCMi9PNFRqams1Q3lIczA1NmdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTTNMVEl6TG1Wak1pNXBiblJsY201aGJJY0VDZ0NKCkZ6QUtCZ2dxaGtqT1BRUURBZ05IQURCRUFpQnZxZHprUVAzTFNoMThzYTlxWnljaENjZGNLb2RmQ3F2VExRekcKbnROenVBSWdRa2xNRGNJaFN4OTdhTGJqN0huUjF0T1ovY2kvbXllSTVxYUUrdVhKY2dBPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-23.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-24T19:06:42Z" lastUpdateTime: "2026-04-24T19:06:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved