--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T23:24:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T23:24:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T23:24:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T23:24:47Z" name: csr-thhl7 resourceVersion: "6277" uid: 4bc22c11-cf33-433c-a179-8392078dd271 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=144c4b8652aa81dc5441bad4b55a8da02179b1a90ffd6486abd71a4fd2470144 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-34.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T23:24:47Z" lastUpdateTime: "2026-07-06T23:24:47Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved