--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T21:50:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T21:50:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T21:50:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T21:50:14Z" name: csr-kh9vw resourceVersion: "6320" uid: 9e9051fa-47e6-448e-9e4e-78e9d154b8f6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e1dd652429402a9df635e2e1e77cf187ac3a0bd9359b825cb8247341dcc4bb1e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-247.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T21:50:14Z" lastUpdateTime: "2026-07-16T21:50:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved