--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T14:54:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T14:54:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T14:54:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T14:54:13Z" name: csr-pztb5 resourceVersion: "6228" uid: 142c0942-082e-47fe-97ad-392be7e6ba43 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=61c3eb954f199805573e2737af6c9012ebbdd8e778dd0ec4f4011c3d659dee35 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-33.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T14:54:13Z" lastUpdateTime: "2026-07-14T14:54:13Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved