--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T13:14:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T13:14:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T13:14:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T13:14:50Z" name: csr-z8mbh resourceVersion: "6563" uid: e7d45359-e620-4423-b530-4b5bb8acda2c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ea50aeedec6a86611bf74149b4dd18cfc5593ff536999bcbd3eefc12a63f0abf groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-149.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T13:14:50Z" lastUpdateTime: "2026-07-02T13:14:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved