--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T15:49:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T15:49:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T15:49:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T15:49:09Z" name: csr-glq2c resourceVersion: "5994" uid: 2631ff68-fd0b-4eef-817a-9659a1a8aee6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d5fd92d6d8f7642d98c5fdababfeb22c845c44e38e8bc7af767f7292440f92b8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-71.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T15:49:09Z" lastUpdateTime: "2026-07-02T15:49:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved