--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T15:10:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T15:10:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-28T15:10:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-28T15:10:28Z" name: csr-spd8z resourceVersion: "5440" uid: 83861685-821f-4c80-a7a7-561413511a05 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ae6f162d657a3d41f52e47b2a9777268c7f2ebc2edd1160c5670b7da5d34bedf groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-98.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-28T15:10:28Z" lastUpdateTime: "2026-05-28T15:10:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved