--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T13:33:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T13:33:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T13:33:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T13:33:11Z" name: csr-6b6f7 resourceVersion: "5890" uid: b953fd3d-97e1-4777-887f-ac8484be3725 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=76fd2949ea093b82c3ad4e71b87bb713c7e333789e1c6ebb2bd79f47d3c9b2fc groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJUQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRJMU1TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTQ1k5ZzhldHByRURnRUdQOG5iTkVrSWROVWpaSlZteUYzL00vYUtQQ2YKYjE3M1QyaW90dUwxclp1ODQ3Y3NaS2VDcnVSNnJqd3VLODBMbnBSUnhxS2JvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpNeTB5TlRFdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJWDdNQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJRHh3Snp1VTd3Uk1sVmh2VEFuRDRuSkVRb0xBc2lIaVJ2WGQKK1hQdmxwc1JBaUVBZ3dCTVZndEptSjIzSHJvVHJlYnB4bUYzZ3l1cVMwaEhncEdJdlo1WTExST0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-251.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T13:33:11Z" lastUpdateTime: "2026-09-16T13:33:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved