--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T17:17:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T17:17:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T17:17:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T17:17:23Z" name: csr-ll2nd resourceVersion: "6046" uid: 1f424b26-9bb4-43e5-afc2-4056c3f55d84 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ed19796aba8303d7a89013e860c45d83dd4fe405bcf0872ef5c746e543b1a712 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJqQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRFME5DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSNjRHOTFqRGRsOU5ITXFpMzBtVm4raXRoUWNma0VuL2t0VUFYMVo3YTEKN3FVV2I1YkRCQlBOQk5VZGx3ZGtjcGxhSUVKbG9WVE8ra3daNXo5YnBkUmRvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURTBNUzB4TkRRdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJMlFNQW9HQ0NxR1NNNDlCQU1DQTBrQU1FWUNJUUNUME5HUXg4NndYV2NSak02TE5MNXQ4Y2pmTWRiTE5jSGQKTWY3K3I2YSsyd0loQUphTVVMV0xtNzgzcCtFKzVlMkNZOHlLa2daOXFPQit4YXFNVlh0elQ5eHYKLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-144.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T17:17:23Z" lastUpdateTime: "2026-07-13T17:17:23Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved