--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T20:06:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T20:06:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T20:06:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T20:06:33Z" name: csr-mn57t resourceVersion: "6292" uid: 8813a636-ef97-4688-a135-a4a617b868ef spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b55d084bcadee1a00c62bf750130b03e8e60a72c89174dc9143fbce256a362a4 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlFqQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRJNExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkNHdE84ZE5GTi9Nbkgwei8vSklrOHE3WW5zZHhlMXpVT1NPaTIvUWl2Z0kKT01sTkdOZ1ZJTFdwb0thRWE3cXhVaHdWYlczc2dSVit6MklacjY5enl5aWdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UUXlMVEk0TG1Wak1pNXBiblJsY201aGJJY0VDZ0NPCkhEQUtCZ2dxaGtqT1BRUURBZ05IQURCRUFpQVZWakdpb1I2eFJOL0lwT0R3NjVaa3dleG4rMDBTQlFaNW1EbmYKRDZEZjBBSWdmM3dEbnc1cGgvM2dXZFFWWEVzZmtvTGJMS2FsR29IcG5za1pBbzZGWXVNPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-28.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T20:06:33Z" lastUpdateTime: "2026-07-20T20:06:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved