--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T02:07:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T02:07:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T02:07:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T02:07:51Z" name: csr-nj5gx resourceVersion: "6403" uid: 70114572-45fc-40f6-8f80-646f13655768 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7e98d84c377f93f0059a8efec1703d57b54c88f6d895fff7e8448677b693a411 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRZMUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkdPcjZ5TWEwU3NSMVN5cVBaeU5aZ2FGaDZGSkI0VUg3NUE5S0RSNTdWNTcKVFdFZWZzRCsrSG9BRTFubmMwTFhzbXlpV1d4SUJDd2MxR0xaSkhKWllIMmdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXdMVFkxTG1Wak1pNXBiblJsY201aGJJY0VDZ0NDClFUQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQk1zOXlBSVlZL3M5SmM2Q0dOU0IwRUl2T2IycGNrL0JWR3ZOcDEKM0ZSNk1nSWhBTDRoU0REczA2WjFXSHNqb3NYakg2MGd2YjdGSHllSFhWWkNiZVdHb2xuQgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-65.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T02:07:51Z" lastUpdateTime: "2026-07-10T02:07:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved