--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T13:14:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T13:14:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T13:14:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T13:14:55Z" name: csr-8nmgw resourceVersion: "6880" uid: d4697330-3326-4f3e-b307-71403f20124e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b9e55f085020736977e62f3da6e810331ee118215815c76275dbc3b3f6d58e57 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-122.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T13:14:55Z" lastUpdateTime: "2026-07-02T13:14:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved