--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T13:16:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T13:16:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T13:16:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T13:16:43Z" name: csr-r8mnk resourceVersion: "6107" uid: a39bbef7-9eb2-4d76-81d1-f30f78949697 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=73d882b8d79602f2fbf896c9d74b98113f1325674c474627a19188df09638fac groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRVMExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk9LK0xJY0YrZXJsbVpmUFNSdTd6M3dUYURvSmxTZlpyRWw5Z1I5RUtjdlEKNSt4M1BSUHVZUkV4cVZYU1VNV1NKMzNBZnNMR1RCdWNRRVpjVmpRV2d6YWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UUXhMVFUwTG1Wak1pNXBiblJsY201aGJJY0VDZ0NOCk5qQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQmJaT3dtdHNYM0tlcEVrK2U1VmEzSkNERzFzRGF4dEkrK2drbUUKYUZmazhBSWhBTDZSVEQ2MkhjZEtKTGtIRVNSSW1oKzMzT0hJSzYyRmZEWCt5VzBKaDFubgotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-54.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T13:16:43Z" lastUpdateTime: "2026-07-20T13:16:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved