--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T22:18:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T22:18:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T22:18:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T22:18:14Z" name: csr-29ttz resourceVersion: "5856" uid: f2b79241-b54a-4c56-b789-7bc0014c1c1b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=668dc0473d6cb09a48fa77c1e528e23e0d6ace4ea1904de0f1669e805c442630 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRJek5TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRNTRUbGtUNHhuajdHdEtwdGQ4OFYvUEIvWkZiTVd4WGRHQ0V2a01La28KVE1XN3JqZHBBUHFTUmxlMXlPbm5mdVBFL2xJRTBvYlA5c0JqMHhnM1M5dWdvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNaTB5TXpVdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJN3JNQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRHNITUZTWlV0azJTVjUzRU9idFV6dVlvS0Mzc3pNTEVZMysKcVpRVHhhc0JBaUI4RDBhdkFzRkk4QWM4NEVURGRLSGg1K0NrY3NGR2Rha053czFnbE96Q3FRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-235.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T22:18:14Z" lastUpdateTime: "2026-09-10T22:18:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved