--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T22:23:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T22:23:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T22:23:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T22:23:55Z" name: csr-klrzw resourceVersion: "6055" uid: d6f67575-1744-4a5b-9b46-f700f789edb4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=bd35bd6c35422aecfc49a0f0ac32bb6c071847ad05baa6ae374df2222dfd5643 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-135.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T22:23:55Z" lastUpdateTime: "2026-07-06T22:23:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved