--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T17:34:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T17:34:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T17:34:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T17:34:38Z" name: csr-482d9 resourceVersion: "6373" uid: 3abbb449-779a-4d8d-bda5-e1ff963f3025 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0416bbe0aaf5861e3e17bbd92b987625987ebd9032cee89407295c08f53810f3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-157.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T17:34:38Z" lastUpdateTime: "2026-07-28T17:34:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved