--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T09:59:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T09:59:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T09:59:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T09:59:30Z" name: csr-q8rm7 resourceVersion: "6102" uid: 4c0dedd0-4fc6-476b-b482-1dbd5741c96d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=02f1818dce2ad7c8dac595d761105cb78ac7eecfe8583b078554e1e0a81944e5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-21.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T09:59:30Z" lastUpdateTime: "2026-07-31T09:59:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved