--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T19:04:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T19:04:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T19:04:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T19:04:17Z" name: csr-7cj29 resourceVersion: "6717" uid: b4aad758-ae57-4079-b9aa-2489e8d25735 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=51a675e7894d1774539dc0c2ef482701c4d65b16659051e44998f293b0094877 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-33.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T19:04:16Z" lastUpdateTime: "2026-07-08T19:04:16Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved