--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:54:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:54:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T19:54:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T19:54:56Z" name: csr-vqb4s resourceVersion: "6081" uid: d778ef09-0880-4954-a09d-402b4ee50c2e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=70d1c493ed368016b6234ac0d77827f98d80f7fe0b4c15714a26b9d2dbe67311 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-1.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T19:54:56Z" lastUpdateTime: "2026-07-02T19:54:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved