--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T15:01:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T15:01:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T15:01:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T15:01:05Z" name: csr-hp9fc resourceVersion: "5660" uid: c88367b1-282f-406e-b4b1-e4085e40991b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3ccadd44db3c6287f3446902d5fc99310c9dfa5483362693a7d25ddabd97a1be groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-117.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T15:01:05Z" lastUpdateTime: "2026-07-29T15:01:05Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved