--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T12:52:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T12:52:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-02T12:52:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-02T12:52:00Z" name: csr-lbvx2 resourceVersion: "5397" uid: fe1c8ee7-e6d8-4c3b-9bb7-8c6836d3a224 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=390b2186ba85bf2c6995b5ffd7d604ba52967e81e7911c0ad7f3d15cec35dffa groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlF6Q0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRZd0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkVhd2ZYQnhCOXRXUk1BR1BsS0o2UmMxMGNYK2g2Z2tSeC90aWNhWlUvT1AKSnBiL2R5MEV5SlFubEZhUDFYT08wckwzeUxOWk9zU0xQLzJocUhTbmVLZWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTTNMVFl3TG1Wak1pNXBiblJsY201aGJJY0VDZ0NKClBEQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpRUF5S1lBaVhUOGZ2SUZibkVBeTl5aWkwNmJEemdhN1pQQ05tNjUKdkFlQXlSMENJQnlyVVBpOVVqVUV6U2kxZm45NUI0Z1VEd1JsKzBRUkxJN3ViQ3NGS2VhdQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-60.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-02T12:52:00Z" lastUpdateTime: "2026-06-02T12:52:00Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved