--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T16:52:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T16:52:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T16:52:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T16:52:26Z" name: csr-gjfc8 resourceVersion: "6080" uid: 3d69f76e-713f-4f7b-a79b-fa5860f38e8c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e69b80f870fef6c8ee394b890691259c3e27e4e47e030fae91356c9fb6c96072 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-145.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T16:52:26Z" lastUpdateTime: "2026-07-16T16:52:26Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved