--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T21:51:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T21:51:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T21:51:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T21:51:23Z" name: csr-xl7gs resourceVersion: "6572" uid: c224e0d7-c2be-44b4-bc66-cd2027b3388c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=869a3c67cc60892252b8f2a448335d2feeafb5b04d52e5be064fcc8a59421848 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-160.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T21:51:23Z" lastUpdateTime: "2026-07-09T21:51:23Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved