--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T12:51:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T12:51:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T12:51:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T12:51:14Z" name: csr-4xhw5 resourceVersion: "5312" uid: 502efa74-76f1-4afc-a62d-4e743d04df1a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=46b9154c8ecc6335713cf01f75b61859c771246d74d163bb306399de4e34a4eb groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-21.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T12:51:14Z" lastUpdateTime: "2026-10-30T12:51:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved