--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T16:21:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T16:21:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T16:21:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T16:21:27Z" name: csr-zwx8g resourceVersion: "6309" uid: a62b4a52-8355-439b-9ac2-a26580fbb815 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=edb9453ae7dc0755b5db902f63a32cf5fce51618492b97f69cd78ce1b3c7a5e9 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE01TFRRMkxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkl6Nnp1R1U1ZnJWV3QzREJkeHR0MVp4dEhvSG9mQk94WkNIeUZ0M1VWS2wKdEZiaWdsQk12cVE2ZEVtNjdUSEFuNnpJU05aQlJqaXJ1aDJYTFgyK3B0T2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTTVMVFEyTG1Wak1pNXBiblJsY201aGJJY0VDZ0NMCkxqQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQXZZVnJjZWRES05SUnVDZjJpeTk3dEhaTCtjcHBXV21sNDlrS3cKUEpONWh3SWhBTmQ4SzdINmdiTVhvZUJyNFNGTnBLV0tmd0s2SlFpeUtGMVVLV3hwb1NjdwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-46.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T16:21:27Z" lastUpdateTime: "2026-07-28T16:21:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved