--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T14:33:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T14:33:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T14:33:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T14:33:39Z" name: csr-kfsn5 resourceVersion: "5857" uid: 90fcb059-f38d-4183-9260-7451e4059761 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=82947b20bb5a729be0d1f03fa364297cef2131da47dd87cb47cef351ce351954 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-61.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T14:33:39Z" lastUpdateTime: "2026-07-15T14:33:39Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved