--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-15T09:14:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-15T09:14:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-15T09:14:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-15T09:14:07Z" name: csr-b8dpb resourceVersion: "6640" uid: 8a1e5fab-726e-4b80-aeef-26c58a2aef15 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4d5e9c4f10105b68c8b2a66c30bfb96e0d6f268ce6c1aacb4d837e25ce2b5545 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-137.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-15T09:14:07Z" lastUpdateTime: "2026-06-15T09:14:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved