--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T16:02:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T16:02:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-08T16:02:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-08T16:02:07Z" name: csr-nh7qg resourceVersion: "6092" uid: cbd3e131-e374-47b2-8342-ffd04e3d0633 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=839281cb5f31c5838ae9fff78ff1a70a4d10ee5fd3d0476913316f3b1af06c32 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-204.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T16:02:07Z" lastUpdateTime: "2026-06-08T16:02:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved