--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T15:38:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T15:38:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T15:38:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T15:38:09Z" name: csr-5xkp9 resourceVersion: "6240" uid: cfa89d38-ae28-4e86-9d9f-b0db3cf89844 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ffcaab2c428950d550273b0a3095c6e2730ab093a91fc8bbab1a1b80f1f6f0b3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-8.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T15:38:09Z" lastUpdateTime: "2026-07-20T15:38:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved