--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T19:00:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T19:00:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T19:00:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T19:00:42Z" name: csr-7vqnz resourceVersion: "6305" uid: 929a0e91-8196-4a4e-9a3f-fe3e2f1d75c7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=488a61326bb2764df6074772dac832a461831c56370f9f8d136a0a941d0957c6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-250.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T19:00:41Z" lastUpdateTime: "2026-07-20T19:00:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved