--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T19:09:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T19:09:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T19:09:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T19:09:38Z" name: csr-2fd8s resourceVersion: "6286" uid: 6c1f0b1f-6c59-43c4-a1a3-ff71a8b23e45 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=90aab8b86bd36ee350fb9332dff19ad55590dbb95e130e6eebef521fa42bbb88 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-72.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T19:09:38Z" lastUpdateTime: "2026-07-06T19:09:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved