--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T10:12:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T10:12:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T10:12:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T10:12:22Z" name: csr-d6558 resourceVersion: "6697" uid: 3c91f867-89ee-4616-9f82-af630f31bb24 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9c5ec04d756d11c973e74836ff5ff87aa489b4ed9d874e23ae51e3debe160e95 groups: - system:nodes - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQlJEQ0I2Z0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRNMkxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk9ENEovR1U2VHp1SEhyaG1OUXk5RzQ0T1Bqek0vcjlaakYzU1lCWFhIdGkKeXpzRUdxYVFWbmU0dlpDM1BvU3ZGaStGM2JwTTYrMmlpOWhOd0VKM2VZNmdQekE5QmdrcWhraUc5dzBCQ1E0eApNREF1TUN3R0ExVWRFUVFsTUNPQ0cybHdMVEV3TFRBdE1UTXhMVE0yTG1Wak1pNXBiblJsY201aGJJY0VDZ0NECkpEQUtCZ2dxaGtqT1BRUURBZ05KQURCR0FpRUF6MmZwY1ZaU2FDdzhNcHpsbGJ0cWJHSUthd2lFUU9BMG4ybEgKRFNVUWhYUUNJUUM3TTgxN3VCY1RmMWYycnhXNzJTOXArL1FYVlhYVWxndVRIRlhCRzBla3dnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-36.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T10:12:22Z" lastUpdateTime: "2026-07-15T10:12:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved