--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T09:50:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T09:50:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T09:50:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T09:50:27Z" name: csr-5r5kx resourceVersion: "6319" uid: b80a0f2b-3f45-45e2-b14d-7b1c66699f1d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fe1eafcd0f4b91192d063f5fe2b6286ff077a7f67b09a337cef72df3bc24b04d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-146.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T09:50:27Z" lastUpdateTime: "2026-07-27T09:50:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved