--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T10:32:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T10:32:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T10:32:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T10:32:27Z" name: csr-w588r resourceVersion: "6146" uid: 2d35dd25-64eb-4c70-b469-8c7a4d2cc697 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d7ed871ec05a0d71da1cbbbb1f01df5195bb0bd498b7f01281cf30cc002a3718 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRJeE15NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTNXc2L2FFK1c4RHU1eE9oVHdKblhRTjFxVHVLRlM4VGdGVEFsdUlrQkQKWTNuVHg0dUhseGhHOFdzUFFiSHlwL3pjMWswWmZhMldCMThJTGJFcjJDTmlvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXlPQzB5TVRNdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJRFZNQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRnYrTlJ1UU9PWGR2R2xRTHNXVEdyd1Zud0ZlakxPMVBzZmcKckdhUFJrVEZBaUJZdUdPUWFlYktrYjBnYVJDbExtWExKUWFyZDZOek9nekF0TEFaWEZpMVRBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-213.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T10:32:27Z" lastUpdateTime: "2026-07-16T10:32:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved