--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T17:46:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T17:46:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T17:46:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T17:46:18Z" name: csr-fzjqt resourceVersion: "5928" uid: 5544fdde-5f57-4019-8362-61333764dd74 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=89ad0f5639d225b72c844ac6ee1bab4ab382fc9cd5590e21a9579fd51ef9b679 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T17:46:18Z" lastUpdateTime: "2026-07-07T17:46:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved