--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T18:48:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T18:48:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T18:48:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T18:48:18Z" name: csr-7prwv resourceVersion: "5798" uid: 54fa3a08-3165-4b07-a73d-d353da811808 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e23446c9899c9a03cd3f6a33807bc189f80ddd02420dee56d9545b6f70eefc31 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRJMUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkhLWXFUb3RGVHdhMTRoTFl3eUFmelpKS2dBSWpqTms5RStqTlRWNFpzK20KczhxZUJKL2JMck9lYlV0Vjh6V1UvZlMvMld3V045MzFpQk5kSzJlOGNIMmdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXpMVEkxTG1Wak1pNXBiblJsY201aGJJY0VDZ0NGCkdUQUtCZ2dxaGtqT1BRUURBZ05KQURCR0FpRUFwM0FidUNKYTZMdm5pNFhzdDF4VEFleGZPUEpRUUZpNWQycFYKNTFlZEgwUUNJUURBcVZSUmZQVmhvOW5kODJqL1ZsRmJPTm0ycjQrUGR0UUgwTFcwcXVMRDV3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-25.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T18:48:18Z" lastUpdateTime: "2026-09-11T18:48:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved