--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T15:05:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T15:05:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T15:05:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T15:05:31Z" name: csr-9cwhv resourceVersion: "6473" uid: 866b65f1-3a84-4a55-90bf-e5c32b0c3b1a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c0a3e080d22efc1ce77fd55fd722a5b97e5e3552907812d8689150f22ff46158 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-46.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T15:05:31Z" lastUpdateTime: "2026-07-27T15:05:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved