--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T09:33:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T09:33:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T09:33:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T09:33:36Z" name: csr-z96w2 resourceVersion: "6226" uid: a49cb6f0-e7fe-498f-a6cd-d1db780637e5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=995e152ab91f9231e60dabc1c575620546a9ddff9cf0177b08d606d72929704e groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRJd05DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSU1ZXb1VRWmxnWDZKYlc1UWo5eTZ4MzkzOEFFVU0xc1ZRNld3UVFmd0IKNC85VThZdTVtdTN0UUJZLzcrMytHaU5nN2J2dkZlNnE1WnFScmVxRHMyZG1vRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpOUzB5TURRdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJZk1NQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJR05LUFo5KzdCdW9HWUhpNTB5NExESEJyU0pGU0VTaUROUzAKQVpkRXBDazhBaUJjajNKSE81ZW81S2h0RXpYRGVuZVgvZHBCMjNYNnU3RXg5UWlseExPbElBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-204.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T09:33:36Z" lastUpdateTime: "2026-07-09T09:33:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved