--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T21:25:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T21:25:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T21:25:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T21:25:51Z" name: csr-j9hg2 resourceVersion: "6450" uid: 941747b0-c87b-4a46-8b9f-9b924b3cd8a7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7309acde24f95a7d12920958fdc45babcf0187cd33ac64dea7676a46079c1896 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-49.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T21:25:51Z" lastUpdateTime: "2026-07-31T21:25:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved