--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T17:52:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T17:52:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T17:52:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T17:52:54Z" name: csr-mr78z resourceVersion: "5805" uid: 4471b0f7-5574-45ab-a8c2-fe06c29f17da spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3e3092d82fae2fa6c9a5b93ec4228db7e93fb57323d37cd814a77ec6af760019 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlFUQ0I2QUlCQURCSU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14THpBdEJnTlZCQU1USm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRBdVpXTXlMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDCkFRWUlLb1pJemowREFRY0RRZ0FFdE8ydy9wT3RrSk44T2NCaGpXeitPLzlMcFFXbGt5SUo0VmJuczlQT1FHRWcKVlN4QTJpQWhpdTR6S1hXV3EyNjZnZTEwaHI5YVQ5UUI5MUpnNVozY3g2QStNRHdHQ1NxR1NJYjNEUUVKRGpFdgpNQzB3S3dZRFZSMFJCQ1F3SW9JYWFYQXRNVEF0TUMweE16Z3RNQzVsWXpJdWFXNTBaWEp1WVd5SEJBb0FpZ0F3CkNnWUlLb1pJemowRUF3SURTQUF3UlFJZ2NNS1FqemhGcGo1UEhncFlObE1jWUxuLzZ1S3J5SmJwcEpDZTdWbFoKTEhVQ0lRQ3dHWjlUZjlmbXlFcHF5VnUwZ1kremcwNU1LZG9WNktuMDljLzRCczh6dUE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-0.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T17:52:54Z" lastUpdateTime: "2026-07-29T17:52:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved