--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T12:22:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T12:22:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T12:22:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T12:22:47Z" name: csr-b5cxg resourceVersion: "6420" uid: 83a2ddbb-fca2-4bf6-9896-393d25df8929 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=55ce0764a8004dddf95f5bae39536480f8bdb0e7f453c45a93b7ae65d5bf5c52 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-3.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T12:22:47Z" lastUpdateTime: "2026-07-27T12:22:47Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved