--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T01:01:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T01:01:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T01:01:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T01:01:02Z" name: csr-mh5ff resourceVersion: "5989" uid: 80beff58-1c0c-49da-8967-741caea39a57 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3648cfa198523a27dafdb31eeec9c2222c09f78024673aa1e7e31f91266ad2d0 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRVMUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk9mL3c4R2pMK0lXYVFIMnhnVyt0L0NDR3V4Q3BLV29IYTlwOEMwRmlWcTkKQXhtdVpJN3VFL3NjS0RQRUtjNEVxa2ZldUV2cFQrUjczWHNhT1RTOGVqS2dQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UUXlMVFUxTG1Wak1pNXBiblJsY201aGJJY0VDZ0NPCk56QUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQmpVek9XMXpMVCtVTlo2TkVUU20vWlhtb1pBdUt1STVUWjljMnYKY0Z4Njl3SWhBTTIrS0daNmxWSkZmQ3RLL1N4ZGdrT1NheVRMQUdUeEt1TFdzd1FtSjR4VQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-55.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T01:01:02Z" lastUpdateTime: "2026-07-07T01:01:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved