--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T15:35:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T15:35:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-21T15:35:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-21T15:35:36Z" name: csr-wqhvj resourceVersion: "6162" uid: 6b24fce3-bf9f-4be0-a2a2-12a1301d26f4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=57bd3ec991178dce6ea3d9cd264d5dc9a6a662aebdf2de05f356abf59f39f0c9 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE15TFRFME1TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTWk53T1EyeENrYTZiVWxWd2ZobTAvZElWL00zUkNuV2lhMVZwT09GVHQKcmtWTWpNQmxVYTNaM1NGelA0aklpMGNQdHNDTXFLTU8vZ2FVcnJVem5Hcm5vRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpNaTB4TkRFdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJU05NQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRjNvUnhEaWRzaURzQlAxTWxlTEZWdUlvVFRQeTRNZm84U0kKRUs2V2IwbWlBaUJmOEp5Q3ljRDRLNm9oeDViOStFODU4UDlJSWEyNEFMYUpBWEt3WnIwanRRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-141.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-21T15:35:36Z" lastUpdateTime: "2026-04-21T15:35:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved