--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T14:48:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T14:48:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T14:48:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T14:48:11Z" name: csr-rcxq2 resourceVersion: "6768" uid: 087bad98-df6b-49de-9940-37bf6be42492 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2e261fd388d9a81389fc0e8f17296b242419a89a324594618416607ba4c3a7f9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-216.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T14:48:11Z" lastUpdateTime: "2026-07-31T14:48:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved