--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T09:26:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T09:26:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T09:26:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T09:26:30Z" name: csr-jvhdz resourceVersion: "6023" uid: 06efd933-8cc0-432f-ab49-b262d1dbc225 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=12fb7157aacc10e21e56e97f06c400f25d587ba2899aa2f420294df99efa3e84 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-42.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T09:26:30Z" lastUpdateTime: "2026-07-14T09:26:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved