--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T08:03:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T08:03:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T08:03:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T08:03:23Z" name: csr-f8sdj resourceVersion: "6126" uid: 7a5cb2ef-2484-40e4-bc10-17a8417bc600 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=aeb65e436fb44006a793c1921140fa66c500f7698e4c823f4defe0c9a73fc535 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-14.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T08:03:23Z" lastUpdateTime: "2026-07-16T08:03:23Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved