--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T17:06:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T17:06:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-10T17:06:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-10T17:06:49Z" name: csr-7g84j resourceVersion: "6377" uid: dc31e575-d6ff-493c-8b9c-b45d54b6e6f7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cd19fd9c6bf22e7df0623d0967d55fe1ce15692ff3ff57776110a939a2ac7fa5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-9.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-10T17:06:49Z" lastUpdateTime: "2026-06-10T17:06:49Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved