--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-20T21:26:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-20T21:26:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-20T21:26:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-20T21:26:34Z" name: csr-c5s2h resourceVersion: "5715" uid: 3229a264-eb11-4f55-925c-3454c1b5579c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=198367425e9581355a2222fc9c8a3dcadefd0ab6f7468e16a15da5953cf62e19 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJqQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRFMU55NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSYzFZbkFScTdaUFROMDRzNGJQMUFtd3k5WDdjdFJncVJSb1FlQ3hmekQKaVJheXVvWUphUnZRR2EvaXovd0x6WWhvRGFwakFoSHhQUGdHVDhlMmxLU0lvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNeTB4TlRjdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJK2RNQW9HQ0NxR1NNNDlCQU1DQTBrQU1FWUNJUURhbmk0SjRvRWUzNjBacUJqTFdzR01OTFlPTkdya3Y5aUYKRE85aVN6SWpDUUloQU1Qc2ltNjlzTkcvSkJ5L2pvYVhDcVlSckliRkNERHJlblAxVzNLSU1pQVYKLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-157.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-20T21:26:34Z" lastUpdateTime: "2026-05-20T21:26:34Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved