--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T22:08:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T22:08:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T22:08:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T22:08:56Z" name: csr-sx4rz resourceVersion: "5809" uid: f6344ed4-4ff1-4c9a-a7e1-e642705f5128 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c0e8056324975c1223f50411ae2ba61f44aa59a1cc86320ed8444b4c114fc6c5 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRRMUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkZ6eUZTSnBGRDlDZnNZTmF0V2Z3VEQ4S3pFSnVlSlJGVXdXRnJaQ1BEeHEKbFVneVBIOHN3cThBcy9nUnlDTHVwaHNSaE1aRmxHMjZ2WHNZZExISFN1dWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXhMVFExTG1Wak1pNXBiblJsY201aGJJY0VDZ0NECkxUQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQlRSUy9rM0pSYXRHMTFTQ1NrVWJqcGpNZHltVTFYSXFDTGN5cXQKbk1RY0lBSWhBSUQ4OVV4YWlVRmVBMnhIenhNRDZIWHk1TEFzY3dEUFNUUU1rWW8xbkhJYwotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-45.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T22:08:56Z" lastUpdateTime: "2026-07-14T22:08:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved