--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T21:10:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T21:10:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T21:10:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T21:10:00Z" name: csr-gqkcl resourceVersion: "6029" uid: 194c0728-1a42-418d-80d1-dd3297b31cb1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ec165aaa31caf8ac1a0809e999873574fd54617afc241ac331e0e48b2bd41eb2 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlFqQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRZd0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk5oTkt5dHdScHNmTVRDaTJjcngyaFM1UVRWb2dCYXpVY2s5emZMVFlwU2sKQ2xWb3JUR0k1STNIWmxmdTU1QzNpMjN3K0FudEdqZnpOdUQ3NURzWllPK2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1USTRMVFl3TG1Wak1pNXBiblJsY201aGJJY0VDZ0NBClBEQUtCZ2dxaGtqT1BRUURBZ05IQURCRUFpQkNGUWs3WUFCMzRMQ3JIdlFWa3JFWkEwaUxWNXJkY1NUbjlhOGsKWWtobEdRSWdFOFV2UmxueVBaN2tXR0d5RlB6N1V3U0kwbXdUeUNzaU1DczRITXZZUHdjPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-60.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T21:10:00Z" lastUpdateTime: "2026-09-09T21:10:00Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved