--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:41:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:41:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T17:41:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T17:41:13Z" name: csr-2wq5g resourceVersion: "6008" uid: 3ce64cd8-164e-4734-b0a2-2c30f0dcc56c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=48737be34f0ac250fb1589026b814261341f05933ea8d762400f7395fdf5ec4d groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0wTFRVM0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkQweXg2c3NsMC9TeDgwRUcyaFJXektvUjNzTlhWNnhnV09ueGtEYzVSRzEKdGkzb1BJQkM1QW8wRVlpc0ljVE9sU3YwTXBXWXJLTzhBdjdRZlgzQzFYZWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTTBMVFUzTG1Wak1pNXBiblJsY201aGJJY0VDZ0NHCk9UQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpRUF5WDdaa2xBa29DSGpQeDZ2N3FnSHBENXU0azJZa3FUWjdZNnkKemVmOWhPc0NJQytVZ2FrSFdKUWk4L2gxN0hTNmRoc25pS2FsT2NITW5KZTZkYkt1Tml5OQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-57.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T17:41:13Z" lastUpdateTime: "2026-09-10T17:41:13Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved