--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T18:03:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T18:03:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T18:03:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T18:03:13Z" name: csr-bk298 resourceVersion: "6404" uid: a97350f4-1e12-4ab2-8d13-355d02dd2f42 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0a6a9af3f7bf635983b2eca9e4782c866db415a9da7f2b03af6d87440d3f2cf4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-217.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T18:03:13Z" lastUpdateTime: "2026-07-10T18:03:13Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved