--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T13:13:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T13:13:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T13:13:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T13:13:36Z" name: csr-6rndl resourceVersion: "5937" uid: 2f86050c-5bf4-46c7-9b1e-beec0f3a9821 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=23c8876bac0e158262d3f2eefe384680830f811c42c1a935c4158bfb0f5cc055 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-146.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T13:13:36Z" lastUpdateTime: "2026-07-07T13:13:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved