--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T15:45:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T15:45:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T15:45:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T15:45:29Z" name: csr-tdkq5 resourceVersion: "6801" uid: 85254859-1bd2-4386-a142-423d191deecb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a841d8a6d58895d62a15d45b3064da259e58c496cf44f23157e3319c846e4775 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-169.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T15:45:29Z" lastUpdateTime: "2026-07-31T15:45:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved