--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T18:34:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T18:34:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T18:34:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T18:34:27Z" name: csr-kmhvs resourceVersion: "6644" uid: 07d860e2-6266-438b-b4ea-2334cfcd1a90 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3e1e9988cc334915f88de47866153c5bb02a215352d8c4cd8d2ce8404387ff66 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-205.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T18:34:27Z" lastUpdateTime: "2026-07-29T18:34:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved