--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T12:26:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T12:26:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T12:26:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T12:26:50Z" name: csr-lqf4q resourceVersion: "6240" uid: 5828ef4a-af18-4376-8bbb-2cff4cef1379 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9b7e18ce927eb510d0719b31e1e69a6018487cca13871be0dfb2155eddbf132a groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJqQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRJME9DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRNGhXSTR0WVE0ckNyU09lNWd1RGFOMXpQcXpyMy9FdnBXTysyNURqQUcKLzFRVjBic2FJTURzY3JTQnEwR0d6YWYwYmprc3BBWE1ETW9BWm1qWlhnQ2ZvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNeTB5TkRndVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJLzRNQW9HQ0NxR1NNNDlCQU1DQTBrQU1FWUNJUUQwMU9zSE5nUDB6QVcxRk5YQURPQm1Zb0dSRzRNNi9yV0QKNlVQOERXUDBld0loQUs5ak0rZWJEeCtSWmEzY25UdlRyaFB2RC9pM0wwU2NnUS9aT0RqZGQ5eTUKLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-248.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T12:26:50Z" lastUpdateTime: "2026-09-11T12:26:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved