--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T01:29:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T01:29:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T01:29:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T01:29:33Z" name: csr-gk2pt resourceVersion: "6769" uid: b872d236-5287-49d8-a1e8-f819e938f6a5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=47fa79a96b0ddc4a34349015ef9a02824b727d7862e666e832dfd17297ab8f8c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-61.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T01:29:32Z" lastUpdateTime: "2026-07-16T01:29:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved