--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T10:10:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T10:10:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T10:10:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T10:10:04Z" name: csr-rw9wq resourceVersion: "6077" uid: b0734843-22c7-4da8-81c1-91d27f567383 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=71bba826d7d8e63d25211dd9cd0207f01b630e2eb67d7e3a98f535005aea6325 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-40.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T10:10:04Z" lastUpdateTime: "2026-07-15T10:10:04Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved