--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T20:35:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T20:35:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T20:35:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T20:35:22Z" name: csr-4wr4j resourceVersion: "5654" uid: 56d5ddf7-4200-430e-a922-5e04bb29cda6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=755caa9d41e877ef91fe954256e765dc85cb4625d599e56021cd9af8afb20891 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-125.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T20:35:22Z" lastUpdateTime: "2026-07-06T20:35:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved