--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T15:09:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T15:09:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-17T15:09:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-17T15:09:04Z" name: csr-9lmhb resourceVersion: "5795" uid: 57809907-24e0-4241-ba03-ab9130549ce3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e80710a31549d6bdfbbcaf4829aa0085ebb00910f48f5fa9925ed7373f716e40 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRFMk5pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUaGIwdHBjZDBObWlSc004d2xCL3hsYXlaUXZjUGhpODNxcDdMU3VnMDMKY3g0aUY5d0VaRlhBc3V6RzROVmMrSUQ1eEsrZmNHVHFYcGhtaDFZUUNCWEJvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNQzB4TmpZdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJeW1NQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRHI4S0ZBaUg1cnlYUUxVYWErM1pVQjg3RkN0YVFKK0YvYWsKWThVUWFTUVVBaUJERVhYVGd4RlZuNitOYVpSSjdQckZzUjdubUFnekdHOE5maUxYQksyU25RPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-166.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T15:09:04Z" lastUpdateTime: "2026-07-17T15:09:04Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved