--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T12:34:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T12:34:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T12:34:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T12:34:41Z" name: csr-8jx8r resourceVersion: "5888" uid: f5c9baee-8117-4d04-89ba-3e35cbb49f23 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a86c502238e7db8b795956144859bf17b33c646c11b22b45c2ff8cc234a425e6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-192.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T12:34:41Z" lastUpdateTime: "2026-07-28T12:34:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved