--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T13:35:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T13:35:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T13:35:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T13:35:35Z" name: csr-q25dc resourceVersion: "5667" uid: 3f2af28c-3320-4933-9382-12eadc5e3ff7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d7cfa3e51ad5ad42b338c4331e411b4f9ccf45146f29ad935c71adbb6699d0bc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-48.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T13:35:35Z" lastUpdateTime: "2026-07-24T13:35:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved