--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-05T11:53:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-05T11:53:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-05T11:53:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-05T11:53:21Z" name: csr-t52cd resourceVersion: "5870" uid: bc1cb5e0-d363-4ea5-8eb1-c86b40e2d7b3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=79d9fcaa94d238d58e54d8e0100b2e3deda8942e8d731fa0b1462cc65b3d2b7e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-207.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-05T11:53:21Z" lastUpdateTime: "2026-07-05T11:53:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved