--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T11:24:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T11:24:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-26T11:24:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-26T11:24:19Z" name: csr-l8rcb resourceVersion: "5253" uid: 1c2026e9-5d02-4e3f-af57-1bf9aa4815af spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9de6082e4c5a4e1b8190e09348434cc073414de35d7230fdfe85f05d9569f509 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRJME9TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRd1VIMkhWSnRiYndiWGVsb00wOGpWOUdicmZpMW1pNUZZZ2VncWJCVW0KVEUwNkxnL2psUENsWHo5TXIzS09qeEZHMG4xTGIzOWVVQjlmWFhoWlYyakJvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpNeTB5TkRrdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJWDVNQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJQXdUK2crdk9IR0NPYklrUVg4NXUwNDdyZHNpQVJWUi9qbDQKeW01a0hqdkdBaUF5MHVuVWlsWk82S2trb29GajJQcVpRL2xjSFU5RW1yQWQvNU9EUHg1aHd3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-249.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T11:24:19Z" lastUpdateTime: "2026-05-26T11:24:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved