--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T18:39:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T18:39:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T18:39:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T18:39:29Z" name: csr-7dq89 resourceVersion: "5877" uid: 25b0bb6e-c285-40a4-8ada-c7fd0a4e6623 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a9dc775a09bc5d0cb35e4c4082eb1e4955e6964253eb5ab85755e570b75a3cf6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-108.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T18:39:29Z" lastUpdateTime: "2026-07-13T18:39:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved