--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T12:12:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T12:12:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-25T12:12:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-25T12:12:59Z" name: csr-mdhlq resourceVersion: "5504" uid: b88ac7a5-85ee-4746-93c0-eec49116a158 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=26e1aae0cec17df79a6eaab4e6d12842c5d30767845e715cec329d90e8cd8ee9 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJqQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRFd055NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRTURSZnB1SEZ2b0E2dEJwSGMzRXB6WEJudG02RTRZS2Roajl5ZHdiVncKSkVYb1pKYnEwaHA2UVFFa2lJR2s4cDc0Z2Q4R2RnK1BFTURGeDlheHVGSGxvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNeTB4TURjdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJOXJNQW9HQ0NxR1NNNDlCQU1DQTBrQU1FWUNJUURubkRiRDAwUCtMK2c4TTlOb1RNVlkrWGwwc0kzcDk1RDMKeEpIcldnS2U3d0loQVBRM0pibmhVUjNLcmpYbHkwZ2tlcU42WkwrTG50SnVCYlpqSm5JbzN5MkwKLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-107.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-25T12:12:59Z" lastUpdateTime: "2026-05-25T12:12:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved