--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T11:40:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T11:40:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T11:40:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T11:40:14Z" name: csr-b2tc9 resourceVersion: "6166" uid: 42453b03-a1c0-4826-856b-c573aaa2ed38 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cd0b4d1ea8a4778f692284dde0c1b553a4da344735f46c88787a05fa2d51eba9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-101.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T11:40:14Z" lastUpdateTime: "2026-07-07T11:40:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved