---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-04-17T11:30:20Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-04-17T11:30:20Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-04-17T11:30:20Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-04-17T11:30:20Z"
  name: csr-qzn7k
  resourceVersion: "5666"
  uid: 37e3a3ba-2547-4bfa-ad56-a2208fef5abd
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=cf1a9d4d47f45af9a107165e916c73b1c6be7820853386bb2f5ab47c131d1577
  groups:
  - system:nodes
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kubelet-serving
  usages:
  - digital signature
  - server auth
  username: system:node:ip-10-0-140-245.ec2.internal
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-04-17T11:30:20Z"
    lastUpdateTime: "2026-04-17T11:30:20Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved