--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T14:53:06Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T14:53:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T14:53:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T14:53:06Z" name: csr-dr4x9 resourceVersion: "6476" uid: f97c2649-4177-4c6a-817d-e596a351b746 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d8a55842a211596f09aca36bbd02f5ab5a0e714acb093c229e88b55af2f31e10 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-47.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T14:53:06Z" lastUpdateTime: "2026-07-28T14:53:06Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved