--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T20:15:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T20:15:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T20:15:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T20:15:28Z" name: csr-kl7mz resourceVersion: "6377" uid: 0e01033d-a1e9-43bd-834a-258b6ed2a681 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dce8162cef38b1c2c4f4f2d0c6b2e547014c77e4fee8288cf47a05753c376b79 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-245.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T20:15:28Z" lastUpdateTime: "2026-07-24T20:15:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved