--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T02:45:08Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T02:45:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T02:45:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T02:45:08Z" name: csr-8tq98 resourceVersion: "6373" uid: 9e9dc36d-cd95-4821-976d-87261043de46 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d0f6b7357dd05d201541eb9d451d85f5be6c487dfd2aee72b3d4843eb84e85fd groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-38.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T02:45:08Z" lastUpdateTime: "2026-07-20T02:45:08Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved