--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T14:35:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T14:35:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T14:35:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T14:35:12Z" name: csr-ncz62 resourceVersion: "6274" uid: 4d6202ed-cc1c-4b70-8ebc-6974cc8b30de spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1a2f1197a2465fd213e285b5b8aba2bebf10d09cefdab28cae9276c122708d8b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-92.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T14:35:12Z" lastUpdateTime: "2026-07-10T14:35:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved