--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T18:02:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T18:02:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-16T18:02:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-16T18:02:01Z" name: csr-rkp2k resourceVersion: "5709" uid: e2240459-d28a-4b52-8e69-2438aaf3ff34 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d92ee83f8d3ed63b0688f60409d3bc3a04c0e05dbb0582386d00c4d0a6d09d41 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRFMUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQklnU29yM21WaGs4czRPRFIydVJSSmRtbE12Zjc1elVBTm1yNmtPelZjYnoKbXJ1c3FZc25tKzQ5K0R3TXJXSjVSbFpmeFZLY20zdHAyNzBwUlJWaHpRS2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTTRMVEUxTG1Wak1pNXBiblJsY201aGJJY0VDZ0NLCkR6QUtCZ2dxaGtqT1BRUURBZ05KQURCR0FpRUEzWmVPN1Vvc3ZXRnlNOXhsVVB5a3RlUWM1ZU44V1NaRVlzSU8KQmdab2oyRUNJUUNFTFNWWVZ5bnFNZTMvNmNnNkNqNjh4L1p1ZlBRRFdtdFpBQlIrL1QxcEFBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-15.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T18:02:01Z" lastUpdateTime: "2026-04-16T18:02:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved