--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T17:10:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T17:10:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T17:10:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T17:10:09Z" name: csr-h7gpj resourceVersion: "6855" uid: 411cf58d-6156-4948-86fc-07d43ae8dcac spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=76af3eb921e19fd807b14ed4d71c3d8629bec6ab4b2c100f6770980aaa7722f0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-145.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T17:10:09Z" lastUpdateTime: "2026-07-08T17:10:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved