--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T19:35:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T19:35:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T19:35:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T19:35:14Z" name: csr-zgvgk resourceVersion: "6540" uid: 2e2d7c54-b942-4709-80b1-bac22c9b39c8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=bd041bcbc91baf02778e4d567bfc09b260bcb2b7d30ea0209d9bf0562a06e8c8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-21.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T19:35:14Z" lastUpdateTime: "2026-07-01T19:35:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved