--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T15:01:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T15:01:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T15:01:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T15:01:45Z" name: csr-9pb8r resourceVersion: "6345" uid: 049f711c-81bd-4ccd-a03e-e05af4b51d37 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d82aa5f937cf49adb8b6dbb17ba831314a9bb6879f47427929de7bc3cb99a019 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-24.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T15:01:45Z" lastUpdateTime: "2026-07-29T15:01:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved