--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T14:38:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T14:38:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T14:38:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T14:38:44Z" name: csr-jmnsq resourceVersion: "5942" uid: 4eb06b2d-4550-4c0e-aa4c-790baebb0412 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=378d45b25b35b4c4df1c5d9cc648a291bb30cd02d0852fcc68df9376e2883be2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-59.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T14:38:44Z" lastUpdateTime: "2026-07-01T14:38:44Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved