--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T19:22:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T19:22:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T19:22:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T19:22:29Z" name: csr-9s4dk resourceVersion: "6390" uid: 60d6cbec-d918-4663-b0eb-a84a6a4dc5e8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2e555ca98f33d67d1b49d95287879dd6505aff109b80de93a5aff5b2661f2c7c groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJUQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRJeU55NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUK3hENlpzWStqdFlVVGJaUHVtVnVQcTBvT2dqUnArU0NLT3UxVmZTZ1AKcTNjN21Kc3kxbXhlOTNtZzg3NXYzOGU4elNCakU3OXIvWXB1S25BZy8vTEVvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpPQzB5TWpjdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJcmpNQW9HQ0NxR1NNNDlCQU1DQTBnQU1FVUNJUUR6SFdSRmIzRzgyVU56RS9ncEtwZ1JEbUNPbzJkZENPdVgKRTZFclYwY0ovUUlnWGRCcS82OHhBWGcvNTJjRGV5MzAvYWlBaU41ZWZITjZXN3lMKzFUSHZabz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-227.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T19:22:29Z" lastUpdateTime: "2026-07-20T19:22:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved