--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T16:01:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T16:01:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T16:01:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T16:01:43Z" name: csr-x4kj6 resourceVersion: "5097" uid: e49084a3-a80f-4f91-9aaf-01acddf5eaa6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=28103781d09b0eeff806b52ed00c62ad2bbdb41e0807c4629f55563fc82fc386 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRFM01pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUTjN3YytUbjltdFl2ZWovTDA0a3Z6TldYcDVkSHovTFE1TW9HbmR5akMKai9jVDRhUWJPMnFTZnZLRVlpTC9sRHhhc3BZQXppSWR4RTJkWDE4WGtpUmRvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpOeTB4TnpJdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJbXNNQW9HQ0NxR1NNNDlCQU1DQTBjQU1FUUNJRUI3cUJid3V0RXE5TE5CQ0JYUUcwajRyYUtpWG5rWWdmMFUKQ3JHR3VtdGRBaUEyQVRPMkdTZGVmVUdzVm1JcVhLam9mSlZieHZaSGoxejkxNm9QYmVTcGtRPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-172.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T16:01:43Z" lastUpdateTime: "2026-09-10T16:01:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved