--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-29T02:51:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-29T02:51:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-29T02:51:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-29T02:51:55Z" name: csr-x76gz resourceVersion: "5538" uid: e6235e5c-4a09-4e1d-af98-d2ef37c82b23 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3d6ff12276fc473d9414b8c24596ad2d8a47bdf75e9307943b2a50fda6ffeb34 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-99.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-29T02:51:55Z" lastUpdateTime: "2026-05-29T02:51:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved