--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T16:08:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T16:08:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T16:08:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T16:08:32Z" name: csr-bjjnj resourceVersion: "5895" uid: 36e7f7cc-c574-41d1-88cb-0544eaec05ea spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=313ca70c4b73b32fecce1ef32b9889874913c29bf901f7f73ae8fc5146678037 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-101.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T16:08:32Z" lastUpdateTime: "2026-07-01T16:08:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved