--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T13:46:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T13:46:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T13:46:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T13:46:36Z" name: csr-n22f7 resourceVersion: "6558" uid: f151b82a-c983-4d9a-ba21-0cdda5195f0d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=49d157efdbe5309d192fb2fbb82a10bce3d1d58861aad5b127aaecb5710a4642 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-18.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T13:46:36Z" lastUpdateTime: "2026-07-28T13:46:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved