--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T00:36:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T00:36:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T00:36:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T00:36:15Z" name: csr-r44ng resourceVersion: "6567" uid: f948f396-f6df-4211-88f3-8b3738768d0d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2c4e3ae0ea8c7ada88c7e4599d07248b68be7f12bd62fac10e8cc1694e2fadaa groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-146.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T00:36:15Z" lastUpdateTime: "2026-07-29T00:36:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved