--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-29T17:56:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-29T17:56:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-29T17:56:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-29T17:56:18Z" name: csr-f8t4z resourceVersion: "5589" uid: fb59e063-fbbc-434a-80b0-ea1a266a1b87 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0a6fce9295ebb2b8f418c832ffc9a74ce5a2feb704221b7abe31f990f19082aa groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-122.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-29T17:56:18Z" lastUpdateTime: "2026-05-29T17:56:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved