--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T22:04:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T22:04:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T22:04:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T22:04:32Z" name: csr-rj7zc resourceVersion: "6488" uid: 2275878d-6789-48a7-baaf-dde2f3b1f98e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=00f55851d95a04f4a8908727f5fe9e064b8320421bea12657f1ec3c367d216a8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-69.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T22:04:32Z" lastUpdateTime: "2026-07-28T22:04:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved