--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T20:17:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T20:17:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T20:17:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T20:17:48Z" name: csr-ksf44 resourceVersion: "6607" uid: aeba845e-745c-4c8b-ac2c-a6b598910088 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b0f988d8420bb44a59ca49d2ddd9c1741dbcfec39e6fd340812df12b420be29d groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRjMExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQklPZ1krTWE0cG9QTWVueEZyMXhDZGZHU1BKdFNkQ3ZDNHQvUXZNalVFRTAKTXRRc0ZMZm0xZWVldVZOck5UOWYzSzc3NThPZit0dnFveGh4bVM1MXFMYWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UUXpMVGMwTG1Wak1pNXBiblJsY201aGJJY0VDZ0NQClNqQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQmdqZStvNEgrNERuZGQzbENoemRXVXRDSjlhZXNKd0dqSHVRcEUKOHl5LzFnSWhBTW9QK0VFYitibXN0OG42cndoTDdBMGh3UzIyZnlOTUIwODlOeTVyclJYWQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-74.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T20:17:48Z" lastUpdateTime: "2026-07-27T20:17:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved