--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T15:08:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T15:08:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T15:08:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T15:08:22Z" name: csr-kk7cx resourceVersion: "5543" uid: 41cbd9c7-56ed-4ec4-b9f7-fa0764953876 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7d2971539739d3d0b98fc2de470dcc23171e546b72e79055e5e2bd0b4a653ec8 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJqQ0I3QUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0wTFRJeE55NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSUmhXaG5sNVBkTmppTHdERm5HSVNWRy9yYjdvNnJjWm8rY0lUd1NJNUMKd1E3eUM1djFWQTBjajFqQ3lVY0tzRzJSMWtlK0ZHNGgzbTZtR1JxVlE2MDZvRUF3UGdZSktvWklodmNOQVFrTwpNVEV3THpBdEJnTlZIUkVFSmpBa2doeHBjQzB4TUMwd0xURXpOQzB5TVRjdVpXTXlMbWx1ZEdWeWJtRnNod1FLCkFJYlpNQW9HQ0NxR1NNNDlCQU1DQTBrQU1FWUNJUUNjNE5QWkNEMDZVbEhJSjg3N1QrWmNLaVNxM2czYldTZGEKUE11NjlIdElCd0loQUowT1J3ZEhlOGg5c1lHemRJTUFpSG9IZVArd1dmK0Z0Z0Ixd3h0bU90ZFIKLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-217.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T15:08:22Z" lastUpdateTime: "2026-04-22T15:08:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved