--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T11:55:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T11:55:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T11:55:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T11:55:17Z" name: csr-kbq6v resourceVersion: "6752" uid: 5123d628-325e-4cb3-b912-ff01798abc62 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f4f1dcc1eba8afde8235582369cc79f2a7ebdbd71afa646fd45b8a3775f832c9 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRreExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk9wbTNPdG5LdFdiOEU3dzE2K1NoQnVGMGwvMUdlUi9Bek16R0dzTitXSGIKZjJIY29YNkxUeWwxeVFPS0VDcFdqY21PcEtHbWRPSStGYzVSUHByNm1PNmdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UUXhMVGt4TG1Wak1pNXBiblJsY201aGJJY0VDZ0NOCld6QUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQm9hamljcW05RXIwVllWREtiZWJVSkVOMzEyNW03YVREcFBaamcKR3ZuOHZ3SWhBSXBTNk1lZWdDWFEwVVNweW1pR0M5MW1zUGRVaDkxZ1hpMmVLRkdJQkd3awotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-91.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T11:55:17Z" lastUpdateTime: "2026-06-09T11:55:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved