--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T02:18:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T02:18:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T02:18:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T02:18:11Z" name: csr-khkgz resourceVersion: "6474" uid: 3e7233bd-2e97-4f8b-8825-3e63286a5918 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7e18bb120c48939b267185634cd36a8f4e6734ec302a51a0190c615bbb52b4de groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-57.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T02:18:11Z" lastUpdateTime: "2026-07-07T02:18:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved