--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T19:00:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T19:00:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T19:00:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T19:00:56Z" name: csr-7s9tc resourceVersion: "5762" uid: ca615165-df4f-4fd3-8ba0-f1b2dc2c9280 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=87f3784178a47a0708e7965c482f42de1fda73b771c56e06bd9a8d026809bf6b groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE01TFRFeU15NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRZGdUNFEvWUxGckptZmJHczA5OEVjRWhoMmxvTWRNSlFhQkhQMCtjeWYKWWJXZFU0VzBNTU0yeUFYMklQQ1RXSXoxZGNvbU1BK2xGMmpFQzEzejQ0eENvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpPUzB4TWpNdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJdDdNQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRC9KK0ZMUXAvcXoxMy9ydnJ3Qk9iVlE5UWo5bDI5N1NVU2MKak9vZXVtUWtBaUI2YVF3cVJRbHJtSmVLVStsMXo1bFVUR29oLzFRWGo1YzEzT1o2ZTc4ZmNnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T19:00:56Z" lastUpdateTime: "2026-07-23T19:00:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved