--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T01:45:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T01:45:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-22T01:45:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-22T01:45:24Z" name: csr-lbkgz resourceVersion: "6946" uid: 7c111cc4-eefc-4c8a-8fc2-0381a8a42628 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cc1a53ea9fc43c39c9e8b5aa4f8a221dd2d46275446b75e5a1724d57211aecd4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-122.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T01:45:24Z" lastUpdateTime: "2026-07-22T01:45:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved