--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T02:09:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T02:09:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-21T02:09:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-21T02:09:32Z" name: csr-vhqb9 resourceVersion: "6464" uid: 8112be2c-a4a9-47b3-acf2-931d6642d7e2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=00b3e9a74771e627f76d8cf2d983e083bae610f63eb771edabb57b89e146c749 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-213.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T02:09:32Z" lastUpdateTime: "2026-07-21T02:09:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved