--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T20:59:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T20:59:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T20:59:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T20:59:12Z" name: csr-j87xm resourceVersion: "6082" uid: 328f8c1c-949e-4524-aa42-04c1b931030c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4c1a3c2716a627b98098170bdcfee1e4ede675c0bba9f34ee6e274fe01bd1e72 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-156.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T20:59:12Z" lastUpdateTime: "2026-07-23T20:59:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved