--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T16:25:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T16:25:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-11T16:25:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-11T16:25:43Z" name: csr-ms4hg resourceVersion: "6122" uid: 210a20ed-fe43-4786-8722-cf4b7c42d383 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4b64b245367bbbc7f77ccfaac42f8f67327c5bdd09b61818d3d6f4538e988842 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-95.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T16:25:43Z" lastUpdateTime: "2026-06-11T16:25:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved