--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T21:45:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T21:45:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T21:45:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T21:45:31Z" name: csr-x2n78 resourceVersion: "6611" uid: dcf1662e-bb3e-4c5d-af20-02032eb9f979 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2e1ffdce9d6ffbabb1304a3a582937cc0fba6fec31cf981d3290b85a0158b6f4 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlFqQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE15TFRZNExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk5McWRNbVhhSVlDNngybnFjNnpiZUpxN2g1QUhHTENld2ZRZ3JSZGp5YUwKd1VXVDJNbFcvS0swNHQxMlowenFSMDMxNU92cXF6ejZZZE5yUnNKTVladWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXlMVFk0TG1Wak1pNXBiblJsY201aGJJY0VDZ0NFClJEQUtCZ2dxaGtqT1BRUURBZ05IQURCRUFpQjFhSk44bE56VVV0anRESHpqZW5QOE1sVEYvN2htNXMxU2tjR0wKWmhoM2xnSWdEZVM5dGY1RWNLN05UNyttKzdJRGlsWkRSZXlVUkdDVEF3TmROMWF3bStRPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-68.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T21:45:31Z" lastUpdateTime: "2026-06-09T21:45:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved