--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T12:02:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T12:02:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T12:02:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T12:02:47Z" name: csr-k7shd resourceVersion: "6439" uid: a4801463-53e8-487c-92dd-b26bd07f3c84 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=868175a608e96e92474e98abb3aa8ff798b548a95e1c23ea9cd56b7d627328ec groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-7.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T12:02:47Z" lastUpdateTime: "2026-07-09T12:02:47Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved