--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T17:10:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T17:10:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T17:10:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T17:10:18Z" name: csr-bkbdh resourceVersion: "5941" uid: 6c39aa2b-34ef-432a-8daa-b3aeaf584f74 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=42a4dedf150cd753e355a702c86a5323bbcc69ffec51b8c886880cda04f4d97e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-14.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T17:10:17Z" lastUpdateTime: "2026-07-28T17:10:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved