--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T19:39:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T19:39:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T19:39:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T19:39:07Z" name: csr-rjcj5 resourceVersion: "5829" uid: c4e2385a-3cc1-412a-b543-68938e95c9d3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b924dd4619bf2538dcfcb2c35aa4b77ad02f34728f9fa643009b51fd2d242bd9 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRJd05TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTaCtwQTRwZklQMy8zT0d6aUxlZ1NjeWZNMEZyNlpIakE0TXRYZE5oemUKQVdpRUt2OVhjTEJid1JIOGxDTGdkejhBZnZWSUtaa3VkT04rUDFjdXJpVjhvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpOeTB5TURVdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJbk5NQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRSt0SEQvUW1hc0YzYnM0eEd0bFBNMW44TDY1K0RwUXB0Tk0KUFh3SlVBbFpBaUFPRzJmRUpzZkhiOXVLdkpYTitHZlQ3U0pMZklEMnM0VUpLNFpGRXRaTzB3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-205.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T19:39:07Z" lastUpdateTime: "2026-09-16T19:39:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved