--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T20:46:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T20:46:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T20:46:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T20:46:15Z" name: csr-rpphn resourceVersion: "5967" uid: 5ed2973b-9735-4541-a559-240c73c21129 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9e9fdc963dd0f9120b6f5aadf16fe54c175e69e3d8ae1ad498c2dfff777a67d5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-166.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T20:46:15Z" lastUpdateTime: "2026-07-01T20:46:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved