--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T18:39:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T18:39:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T18:39:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T18:39:27Z" name: csr-5s2w8 resourceVersion: "5966" uid: 8f12af54-8bad-4abe-b93e-e61eeaf6d8f1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1a5d6791389e1bdcdf5259b59f7ca487a76370a317e8ab77e66430c1cb7de645 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-78.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T18:39:27Z" lastUpdateTime: "2026-07-13T18:39:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved