--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T13:59:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T13:59:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-16T13:59:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-16T13:59:35Z" name: csr-r9shd resourceVersion: "6071" uid: d0d9e3c5-f7bf-464b-8767-23b55858f47d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1f6e493056ff162f237fc25e197ac2ed137e45329ebd067f5a708f31332b8538 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-133.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T13:59:35Z" lastUpdateTime: "2026-04-16T13:59:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved